0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 784.965040][ T5338] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 784.979655][ T4833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.990886][ T4843] usb 5-1: device descriptor read/64, error 18 03:07:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000a000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 785.012289][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 785.020836][ T4833] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 785.037436][ T4833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:07:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000b000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 785.058314][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 785.066393][ T4833] usb 4-1: config 0 descriptor?? [ 785.075308][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000f000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 785.107517][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 785.279426][ T4843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 785.449432][ T5338] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 785.469417][ T4843] usb 5-1: device descriptor read/64, error 18 [ 785.521676][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.535423][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.560330][ T4833] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor [ 785.579477][ T4833] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0052/input/input108 [ 785.591183][ T4843] usb usb5-port1: attempt power cycle [ 785.670388][ T4833] keytouch 0003:0926:3333.0052: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 785.729996][ T5338] usb 2-1: Using ep0 maxpacket: 32 [ 785.859631][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 785.968571][T10944] usb 4-1: USB disconnect, device number 7 [ 785.999475][ T4843] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 786.049527][ T5338] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 786.058608][ T5338] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 786.067681][ T5338] usb 2-1: Product: syz [ 786.072255][ T5338] usb 2-1: Manufacturer: syz [ 786.076864][ T5338] usb 2-1: SerialNumber: syz [ 786.083813][ T5338] usb 2-1: config 0 descriptor?? [ 786.122304][ T5338] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 786.133913][ T5338] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 786.169537][ T4843] usb 5-1: device descriptor read/8, error -61 [ 786.439504][ T4843] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 786.609649][ T4843] usb 5-1: device descriptor read/8, error -61 [ 786.739725][ T4843] usb usb5-port1: unable to enumerate USB device 03:07:37 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:07:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x3f00, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000011000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x8a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x6, 0x50, 0x6b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "824b07"}, {0x5, 0x24, 0x0, 0xeca}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x14, 0x401, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x76c}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xb6, 0xe3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x5, 0x77}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x4, 0x3a, 0x8, 0xf3}, 0x2f, &(0x7f00000001c0)={0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x20, 0x0, 0xfe01}, @ssp_cap={0x20, 0x10, 0xa, 0x78, 0x5, 0x4, 0xf000, 0xf6aa, [0x3fc0, 0xff0000, 0x0, 0xffc000, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x18}}, {0x2e, &(0x7f0000000280)=@string={0x2e, 0x3, "dc83c175282567d54eca173213d95b98013a8e6ad71def0c6aa656c7eada75ad0bdbbe8064a9960e69a5b545"}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0xf, 0x32, {0x32, 0x11, "fed4c3ae488b5ae28a91090dd4724b22bd2a8a66b161f1453533699ac95d670b3e172af79acd3ef1ab209546b33e3ded"}}, &(0x7f0000000340)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "b259d480673e446055553462ac194463504a06ec803eec748d071166519d781ab4682135192ff6eccf4673a4688402b2618b80afb1d348dc0f908c502967931e4c4e2d6900bee396d196f0e0b1d8d2e2785665ee40017cf1295a6e7c82b1397928cf7898492041575093b22a778853c3b7875bbd390292cc6cd916f52f6d22f93641c62f6a6ed11f71938ab49d9aa574045f115458b5d25f8f51df0112e94a49cb760b556d50083fade4f524ee17d61594adcd8b21e30fa4c9fde7f223c8e195334302fc95"}}, &(0x7f0000000440)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x14, 0x0, 0x30, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x81, 0x1, "2e1496bf", "86d890c9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x18, 0x9, 0x6, 0x9, 0x800}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x60, 0x1, 0xdc, "a3ddd838ccc3bd9bdb8a4e2a8b0315cf44d3baa8b842a608f00941c65a28597ee7d2e72c6ca43dc504b0bfa3ccbfe8e409cc320fa402977a53e46ab5f455920193f67d58a99e35d9d6a823179a4f713ee84ccc3ad7f004bac5f97485eb39549da4a462777d464ab5915551c3c3068efed14171829c98da977ade7c15911cf9340d6e8153413f52e1488d68d3fd0f069d50b0e201874396c4484d2baf0391e9583408e2bd9c4793d3f29a62e44e899773888d1469901fcf45669306decd7813d1d63a1e132309471740159a791e89b3f40f1ddb20717d7ed7791de6f9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x80, 0x8, [0xb2b315acdaab80aa]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xfe}, &(0x7f00000007c0)={0x40, 0xb, 0x2, 'q>'}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "fd8f"}, &(0x7f0000000900)={0x40, 0x1a, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x8a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x6, 0x50, 0x6b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "824b07"}, {0x5, 0x24, 0x0, 0xeca}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x14, 0x401, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x76c}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xb6, 0xe3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x5, 0x77}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x4, 0x3a, 0x8, 0xf3}, 0x2f, &(0x7f00000001c0)={0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x20, 0x0, 0xfe01}, @ssp_cap={0x20, 0x10, 0xa, 0x78, 0x5, 0x4, 0xf000, 0xf6aa, [0x3fc0, 0xff0000, 0x0, 0xffc000, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x18}}, {0x2e, &(0x7f0000000280)=@string={0x2e, 0x3, "dc83c175282567d54eca173213d95b98013a8e6ad71def0c6aa656c7eada75ad0bdbbe8064a9960e69a5b545"}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0xf, 0x32, {0x32, 0x11, "fed4c3ae488b5ae28a91090dd4724b22bd2a8a66b161f1453533699ac95d670b3e172af79acd3ef1ab209546b33e3ded"}}, &(0x7f0000000340)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "b259d480673e446055553462ac194463504a06ec803eec748d071166519d781ab4682135192ff6eccf4673a4688402b2618b80afb1d348dc0f908c502967931e4c4e2d6900bee396d196f0e0b1d8d2e2785665ee40017cf1295a6e7c82b1397928cf7898492041575093b22a778853c3b7875bbd390292cc6cd916f52f6d22f93641c62f6a6ed11f71938ab49d9aa574045f115458b5d25f8f51df0112e94a49cb760b556d50083fade4f524ee17d61594adcd8b21e30fa4c9fde7f223c8e195334302fc95"}}, &(0x7f0000000440)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x14, 0x0, 0x30, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x81, 0x1, "2e1496bf", "86d890c9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x18, 0x9, 0x6, 0x9, 0x800}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x60, 0x1, 0xdc, "a3ddd838ccc3bd9bdb8a4e2a8b0315cf44d3baa8b842a608f00941c65a28597ee7d2e72c6ca43dc504b0bfa3ccbfe8e409cc320fa402977a53e46ab5f455920193f67d58a99e35d9d6a823179a4f713ee84ccc3ad7f004bac5f97485eb39549da4a462777d464ab5915551c3c3068efed14171829c98da977ade7c15911cf9340d6e8153413f52e1488d68d3fd0f069d50b0e201874396c4484d2baf0391e9583408e2bd9c4793d3f29a62e44e899773888d1469901fcf45669306decd7813d1d63a1e132309471740159a791e89b3f40f1ddb20717d7ed7791de6f9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x80, 0x8, [0xb2b315acdaab80aa]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xfe}, &(0x7f00000007c0)={0x40, 0xb, 0x2, 'q>'}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "fd8f"}, &(0x7f0000000900)={0x40, 0x1a, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x1f}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) [ 787.414875][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.440875][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 787.679390][ T3669] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 787.869605][ T5338] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 788.039465][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.050731][ T3669] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 788.059983][ T5338] usb 5-1: device descriptor read/64, error 18 [ 788.066223][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.076216][ T3669] usb 4-1: config 0 descriptor?? [ 788.339452][ T5338] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 788.529464][ T5338] usb 5-1: device descriptor read/64, error 18 [ 788.541070][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.550458][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.560936][ T3669] keytouch 0003:0926:3333.0053: fixing up Keytouch IEC report descriptor [ 788.572797][ T3669] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0053/input/input109 [ 788.652727][ T5338] usb usb5-port1: attempt power cycle [ 788.661278][ T3669] keytouch 0003:0926:3333.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 788.972236][ T3731] usb 4-1: USB disconnect, device number 8 [ 789.079381][ T5338] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 789.249473][ T5338] usb 5-1: device descriptor read/8, error -61 [ 789.520189][ T5338] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 789.689910][ T5338] usb 5-1: device descriptor read/8, error -61 [ 789.809609][ T5338] usb usb5-port1: unable to enumerate USB device 03:07:41 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x0, 0xb, {0xb, 0xd, "d54866e2c1cfbeedfd"}}, &(0x7f0000000180)={0x0, 0x3, 0x51, @string={0x51, 0x3, "894f305f6da18e67cfb9abfdbd805b2774c364dfe6b9117cbe2317e2da94afa45d4c0bd498febd6307ba6da2864a4f823c4040cdc29865ad1da9631b91cb91c6d6550d8c2bacd22c123251c6e4eeb5"}}, &(0x7f0000000200)={0x0, 0xf, 0x9a, {0x5, 0xf, 0x9a, 0x2, [@generic={0x92, 0x10, 0xb, "4279e6acf0410eabef073c2cc4e5d406db7cf42cb4d6382a9daacae5b5a86f250067cbc44efbf71d26b020bb2b4c6d1cf0e4d2a7eab6e1e9d1efb90ace74072a51f3b3d6e13b9469c7dcb5b7b1ca9bc034e9f3705bebfad82bf67a95a483ae8da224f2dd93dcdc360a91a02532608aa4d1883baf718380dcbd14cff1e40e93f6214d18ca0e52cd1dc440f363bd5e33"}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x7, "379acf0c", "77430ce6"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x1, 0x3, 0x1f, 0x7, 0xfff8}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x17, 0xd4, "1f8a56ec9f2829669eea2ea2d1ecab45e2643ee3edf7302254214106ac04553030a4bc07f620d11bf8bcd545a3d72854b38b672e6abebda253e14c9e708d7e913cd5ff4679d340beb7e8a5c77434ed3f8b053a70f82ad278ea1caf6332b40f75eebe2b5cb266a30d54a2836d5a790c7ecba6ab584ca51906e061b4d46bf2bd6d518e24cefbdd4a38fa6710166023c85ddac6a51189d7973be2c30ed044d3bc4bd300c89272d7ed97f9af62308415f0bc3aa44fd66882ca37c2fb1d671034824b147b7e02c6657047a63ffb5060acd50c9bd9f54b"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xc6}, &(0x7f0000000500)={0x20, 0x0, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x80, 0x4}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000600)={0x40, 0xb, 0x2, '\vq'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "9852"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) 03:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000003f000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xfffc4698, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x5865, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x8a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x6, 0x50, 0x6b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "824b07"}, {0x5, 0x24, 0x0, 0xeca}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x14, 0x401, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x76c}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xb6, 0xe3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x5, 0x77}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x4, 0x3a, 0x8, 0xf3}, 0x2f, &(0x7f00000001c0)={0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x20, 0x0, 0xfe01}, @ssp_cap={0x20, 0x10, 0xa, 0x78, 0x5, 0x4, 0xf000, 0xf6aa, [0x3fc0, 0xff0000, 0x0, 0xffc000, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x18}}, {0x2e, &(0x7f0000000280)=@string={0x2e, 0x3, "dc83c175282567d54eca173213d95b98013a8e6ad71def0c6aa656c7eada75ad0bdbbe8064a9960e69a5b545"}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0xf, 0x32, {0x32, 0x11, "fed4c3ae488b5ae28a91090dd4724b22bd2a8a66b161f1453533699ac95d670b3e172af79acd3ef1ab209546b33e3ded"}}, &(0x7f0000000340)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "b259d480673e446055553462ac194463504a06ec803eec748d071166519d781ab4682135192ff6eccf4673a4688402b2618b80afb1d348dc0f908c502967931e4c4e2d6900bee396d196f0e0b1d8d2e2785665ee40017cf1295a6e7c82b1397928cf7898492041575093b22a778853c3b7875bbd390292cc6cd916f52f6d22f93641c62f6a6ed11f71938ab49d9aa574045f115458b5d25f8f51df0112e94a49cb760b556d50083fade4f524ee17d61594adcd8b21e30fa4c9fde7f223c8e195334302fc95"}}, &(0x7f0000000440)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x14, 0x0, 0x30, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x81, 0x1, "2e1496bf", "86d890c9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x18, 0x9, 0x6, 0x9, 0x800}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x60, 0x1, 0xdc, "a3ddd838ccc3bd9bdb8a4e2a8b0315cf44d3baa8b842a608f00941c65a28597ee7d2e72c6ca43dc504b0bfa3ccbfe8e409cc320fa402977a53e46ab5f455920193f67d58a99e35d9d6a823179a4f713ee84ccc3ad7f004bac5f97485eb39549da4a462777d464ab5915551c3c3068efed14171829c98da977ade7c15911cf9340d6e8153413f52e1488d68d3fd0f069d50b0e201874396c4484d2baf0391e9583408e2bd9c4793d3f29a62e44e899773888d1469901fcf45669306decd7813d1d63a1e132309471740159a791e89b3f40f1ddb20717d7ed7791de6f9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x80, 0x8, [0xb2b315acdaab80aa]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xfe}, &(0x7f00000007c0)={0x40, 0xb, 0x2, 'q>'}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "fd8f"}, &(0x7f0000000900)={0x40, 0x1a, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x1f}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:07:41 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 791.379536][T11913] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 791.400220][ T3690] usb 2-1: USB disconnect, device number 64 [ 791.436225][T11937] __nla_validate_parse: 2 callbacks suppressed [ 791.436245][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.455282][ T3690] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000030000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 791.493637][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.504034][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.526356][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000040030000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x6000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000003400000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 791.640543][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.655864][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.678637][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.703293][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.709437][T10944] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 791.720434][ T5338] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 791.879512][ T3690] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 791.969466][ T5338] usb 5-1: Using ep0 maxpacket: 32 [ 792.089620][T10944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.100676][ T5338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.110869][T10944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 792.124709][ T5338] usb 5-1: config 0 has no interfaces? [ 792.130415][T10944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.149461][T10944] usb 4-1: config 0 descriptor?? [ 792.159539][ T3690] usb 2-1: Using ep0 maxpacket: 32 [ 792.289442][ T3690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 792.299570][ T5338] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 792.313938][ T5338] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 792.322468][ T5338] usb 5-1: Product: syz [ 792.326657][ T5338] usb 5-1: Manufacturer: syz [ 792.335761][ T5338] usb 5-1: SerialNumber: syz [ 792.342494][ T5338] usb 5-1: config 0 descriptor?? [ 792.479548][ T3690] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 792.489059][ T3690] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 792.497893][ T3690] usb 2-1: Product: syz [ 792.502701][ T3690] usb 2-1: Manufacturer: syz [ 792.507425][ T3690] usb 2-1: SerialNumber: syz [ 792.514783][ T3690] usb 2-1: config 0 descriptor?? [ 792.572601][ T3690] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 792.587126][ T3690] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 792.610583][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.619200][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.651076][T10944] keytouch 0003:0926:3333.0054: fixing up Keytouch IEC report descriptor [ 792.663285][T10944] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0054/input/input110 [ 792.744284][T10944] keytouch 0003:0926:3333.0054: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 792.835491][ T5338] usb 2-1: USB disconnect, device number 65 [ 792.862087][ T4843] usb 4-1: USB disconnect, device number 9 [ 794.420519][ T4843] usb 5-1: USB disconnect, device number 9 03:07:44 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) read$char_usb(r1, &(0x7f0000000180)=""/231, 0xe7) 03:07:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000fffff00000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x6558, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0xe, 0x23, {0x23, 0x6, "1a8095533fb530e96c4dc323bc15c1a90f13279d56e86d8ce638e50aa605f7da3d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xa1, "d88b77b89a8023037de2e8a57d63104cf3e446f317b6ae19e953899ffdb3d9ea4650bc0157e60c25f8c7fb2835ea389ef4e5cb367e88c253b0dc0241a40107b0c2d975b26f0ca621f7d133aff95c938af9594d1e7e8f5ba9ed1e6d83beca1d7aa37013ebf4a3ee6d7ff0f7b2a6b281ee1000395cb79807da03980877b401a23518d31c5060de2f95351c6ae15c8317d26f33e7fe9af0e31ef73b5f9c71ec547251"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x401, 0x2, 0x1000, 0xd676, 0x5, 0x8, 0x6, 0x0, 0x401, 0x200, 0x20}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x7cf}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="40100b00000033b33c93d40ef2b5000000"], &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0x152249410ebc1869, 0x34, "6a743c1ae7824d9f338e8e60a360be03c8e898cbf90f0524b600f5fe5600b3f14b40f0667d94bb326d0827cf317b33d614dd9a63"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x101, 0x5, 0x400, 0x3, 0x0, 0x682, 0x5, 0x401, 0x1, 0x6, 0xfffd, 0x3}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x3cde}, &(0x7f00000006c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:07:44 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 794.481774][ T5338] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:07:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000100000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 794.527673][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 794.562722][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000200000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x700c, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000300000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 794.779700][ T3690] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 794.879508][ T4843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 794.970310][ T5338] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 795.119551][ T4843] usb 5-1: Using ep0 maxpacket: 32 [ 795.139668][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.155585][ T3690] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 795.165260][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.180454][ T3690] usb 4-1: config 0 descriptor?? [ 795.181644][ T5338] usb 2-1: device descriptor read/64, error 18 [ 795.239530][ T4843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.249714][ T4843] usb 5-1: config 0 has no interfaces? [ 795.409474][ T4843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 795.418593][ T4843] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 795.431467][ T4843] usb 5-1: Product: syz [ 795.435685][ T4843] usb 5-1: Manufacturer: syz [ 795.440814][ T4843] usb 5-1: SerialNumber: syz [ 795.447418][ T4843] usb 5-1: config 0 descriptor?? [ 795.479428][ T5338] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 795.660963][ T3690] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 795.674193][ T3690] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0055/input/input111 [ 795.689910][ T5338] usb 2-1: device descriptor read/64, error 18 [ 795.757536][ T3690] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 795.821259][ T5338] usb usb2-port1: attempt power cycle [ 796.064706][ T22] usb 4-1: USB disconnect, device number 10 [ 796.269414][ T5338] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 796.479472][ T5338] usb 2-1: device descriptor read/8, error -61 [ 796.759434][ T5338] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 796.959462][ T5338] usb 2-1: device descriptor read/8, error -61 [ 797.080272][ T5338] usb usb2-port1: unable to enumerate USB device 03:07:47 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) read$char_usb(r1, &(0x7f0000000180)=""/231, 0xe7) 03:07:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x8100, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000400000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0xe, 0x23, {0x23, 0x6, "1a8095533fb530e96c4dc323bc15c1a90f13279d56e86d8ce638e50aa605f7da3d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xa1, "d88b77b89a8023037de2e8a57d63104cf3e446f317b6ae19e953899ffdb3d9ea4650bc0157e60c25f8c7fb2835ea389ef4e5cb367e88c253b0dc0241a40107b0c2d975b26f0ca621f7d133aff95c938af9594d1e7e8f5ba9ed1e6d83beca1d7aa37013ebf4a3ee6d7ff0f7b2a6b281ee1000395cb79807da03980877b401a23518d31c5060de2f95351c6ae15c8317d26f33e7fe9af0e31ef73b5f9c71ec547251"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x401, 0x2, 0x1000, 0xd676, 0x5, 0x8, 0x6, 0x0, 0x401, 0x200, 0x20}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x7cf}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="40100b00000033b33c93d40ef2b5000000"], &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0x152249410ebc1869, 0x34, "6a743c1ae7824d9f338e8e60a360be03c8e898cbf90f0524b600f5fe5600b3f14b40f0667d94bb326d0827cf317b33d614dd9a63"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x101, 0x5, 0x400, 0x3, 0x0, 0x682, 0x5, 0x401, 0x1, 0x6, 0xfffd, 0x3}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x3cde}, &(0x7f00000006c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) (async, rerun: 32) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (rerun: 32) 03:07:47 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 797.509195][ T5338] usb 5-1: USB disconnect, device number 10 03:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000500000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 797.576853][T11992] __nla_validate_parse: 8 callbacks suppressed [ 797.576875][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000600000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 797.638309][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 797.648071][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 797.678202][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xf000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000800000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 797.765956][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 797.778013][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 797.809608][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 797.815382][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 797.838800][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.009754][ T5338] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 798.019614][ T3690] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 798.179478][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.195080][ T22] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 798.204494][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.218704][ T22] usb 4-1: config 0 descriptor?? [ 798.229487][ T3690] usb 2-1: device descriptor read/64, error 18 [ 798.249503][ T5338] usb 5-1: Using ep0 maxpacket: 32 [ 798.370483][ T5338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.380756][ T5338] usb 5-1: config 0 has no interfaces? [ 798.509478][ T3690] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 798.539605][ T5338] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 798.548685][ T5338] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 798.557654][ T5338] usb 5-1: Product: syz [ 798.562297][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 798.568265][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 798.575138][ T5338] usb 5-1: Manufacturer: syz [ 798.580674][ T5338] usb 5-1: SerialNumber: syz [ 798.589025][ T22] usb 4-1: USB disconnect, device number 11 [ 798.597087][ T5338] usb 5-1: config 0 descriptor?? [ 798.719559][ T3690] usb 2-1: device descriptor read/64, error 18 [ 798.839880][ T3690] usb usb2-port1: attempt power cycle [ 799.279508][ T3690] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 799.479606][ T3690] usb 2-1: device descriptor read/8, error -61 [ 799.770325][ T3690] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 799.949720][ T3690] usb 2-1: device descriptor read/8, error -61 [ 800.073877][ T3690] usb usb2-port1: unable to enumerate USB device 03:07:50 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) read$char_usb(r1, &(0x7f0000000180)=""/231, 0xe7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) read$char_usb(r1, &(0x7f0000000180)=""/231, 0xe7) (async) 03:07:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000900000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x34000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0xe, 0x23, {0x23, 0x6, "1a8095533fb530e96c4dc323bc15c1a90f13279d56e86d8ce638e50aa605f7da3d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xa1, "d88b77b89a8023037de2e8a57d63104cf3e446f317b6ae19e953899ffdb3d9ea4650bc0157e60c25f8c7fb2835ea389ef4e5cb367e88c253b0dc0241a40107b0c2d975b26f0ca621f7d133aff95c938af9594d1e7e8f5ba9ed1e6d83beca1d7aa37013ebf4a3ee6d7ff0f7b2a6b281ee1000395cb79807da03980877b401a23518d31c5060de2f95351c6ae15c8317d26f33e7fe9af0e31ef73b5f9c71ec547251"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x401, 0x2, 0x1000, 0xd676, 0x5, 0x8, 0x6, 0x0, 0x401, 0x200, 0x20}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x7cf}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="40100b00000033b33c93d40ef2b5000000"], &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0x152249410ebc1869, 0x34, "6a743c1ae7824d9f338e8e60a360be03c8e898cbf90f0524b600f5fe5600b3f14b40f0667d94bb326d0827cf317b33d614dd9a63"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x101, 0x5, 0x400, 0x3, 0x0, 0x682, 0x5, 0x401, 0x1, 0x6, 0xfffd, 0x3}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x3cde}, &(0x7f00000006c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) (rerun: 32) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:07:50 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 800.575968][ T22] usb 5-1: USB disconnect, device number 11 03:07:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000a00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 800.617373][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 800.656069][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x400300, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000b00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000f00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x3, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 800.889773][ T3669] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 801.049435][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 801.069512][ T5338] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 801.259574][ T5338] usb 2-1: device descriptor read/64, error 18 [ 801.265837][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.276824][ T3669] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 801.285925][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.294739][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 801.302562][ T3669] usb 4-1: config 0 descriptor?? [ 801.419507][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.429740][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.530219][ T5338] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 801.599756][ T22] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 801.608858][ T22] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 801.617984][ T22] usb 5-1: Product: syz [ 801.622777][ T22] usb 5-1: Manufacturer: syz [ 801.627453][ T22] usb 5-1: SerialNumber: syz [ 801.639428][ T3669] usbhid 4-1:0.0: can't add hid device: -71 [ 801.645437][ T3669] usbhid: probe of 4-1:0.0 failed with error -71 [ 801.652765][ T22] usb 5-1: config 0 descriptor?? [ 801.659135][ T3669] usb 4-1: USB disconnect, device number 12 [ 801.691372][ T22] ldusb 5-1:0.0: Interrupt in endpoint not found [ 801.720819][ T5338] usb 2-1: device descriptor read/64, error 18 [ 801.839510][ T5338] usb usb2-port1: attempt power cycle [ 802.260316][ T5338] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 802.429574][ T5338] usb 2-1: device descriptor read/8, error -61 [ 802.699405][ T5338] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 802.869411][ T5338] usb 2-1: device descriptor read/8, error -61 [ 802.989606][ T5338] usb usb2-port1: unable to enumerate USB device 03:07:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7}]}}, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902810003010500000904000000010100000a24010800fc02010207240700010001072407000000000c2402000000000200000000090401000001020000090401010101020000090501091002e0000007250100040180090402000001020000090402010101020000082402018100000009058209000080030507250181bc0000"], 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_ep_write(r1, 0x2, 0xd9, &(0x7f0000000240)="25debf4e2d7781aa83824de05dde8a4a6c4f2e1a37eee8c851573881784c69287be16d276b4c53f56f6c1657ee49b805fd0a6e14e9400e274962715671c89fa4da0372e13fa530545c8ce34bc388d3e81c211022bb1a3089eec8e1b49d38ced9c692af883fe243f50e4eef7dfa5c183b3d93fbd8ec62182af0e2425324e8292266ec15e0c7e00b9a11cb51bb971866c015edfee66bf25b9abb2506030a2411eb32a94d09e2d4c2ca0ef1537a0aa88e24ef5af6b0c4225f5143c76fe8a0b2556a52ba71e66dff88fadb0adca8c29d6998e32ed0ad13d9ae6376") 03:07:53 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000000009040009058703013581648fe898411cb876447ed84ddb9834203d1fbe3042cfa0ca1b59ac735664e543c6ec3315af3bb3ebb9d5cb33a1172646db427a904a6698"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:07:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x4, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:54 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 803.665979][ T5338] usb 5-1: USB disconnect, device number 12 [ 803.684367][T12052] __nla_validate_parse: 8 callbacks suppressed [ 803.684387][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001100000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 803.728302][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 803.742526][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:07:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000a732c61200000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 803.793797][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000003f00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x5, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ffffff9e00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 803.908178][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 803.933801][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000012c632a700000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 803.953889][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 803.959492][ T3694] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 803.988521][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 804.129421][ T3690] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 804.169348][ T5338] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 804.329574][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.340600][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 804.349760][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.370394][ T3694] usb 4-1: config 0 descriptor?? [ 804.379511][ T3690] usb 2-1: Using ep0 maxpacket: 32 [ 804.432288][ T5338] usb 5-1: Using ep0 maxpacket: 32 [ 804.499693][ T3690] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 804.510110][ T3690] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 804.523165][ T3690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 804.569538][ T5338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.579831][ T5338] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 804.689735][ T3690] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 804.698853][ T3690] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 804.714164][ T3690] usb 2-1: Product: syz [ 804.718409][ T3690] usb 2-1: Manufacturer: syz [ 804.723981][ T3690] usb 2-1: SerialNumber: syz [ 804.743213][ T3690] usb 2-1: config 0 descriptor?? [ 804.779620][ T5338] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 804.788815][ T5338] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 804.797710][ T5338] usb 5-1: Product: syz [ 804.802179][ T5338] usb 5-1: Manufacturer: syz [ 804.806801][ T5338] usb 5-1: SerialNumber: syz [ 804.813924][ T5338] usb 5-1: config 0 descriptor?? [ 804.861020][ T3694] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 804.871176][ T5338] ldusb 5-1:0.0: Interrupt in endpoint not found [ 804.882593][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0056/input/input112 [ 804.965994][ T3694] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 805.040896][ T3690] ldusb 2-1:0.0: Interrupt in endpoint not found [ 805.050375][ T3690] usb 2-1: USB disconnect, device number 78 [ 805.069951][T12054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.084391][T12054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.296705][ T4843] usb 4-1: USB disconnect, device number 13 03:07:56 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000000009040009058703013581648fe898411cb876447ed84ddb9834203d1fbe3042cfa0ca1b59ac735664e543c6ec3315af3bb3ebb9d5cb33a1172646db427a904a6698"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:07:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x6, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000fffffff000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 805.941005][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 805.952838][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 806.259442][ T22] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 806.529478][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 806.659517][ T22] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 806.674098][ T22] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 806.687611][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 03:07:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0ffff00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7}]}}, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902810003010500000904000000010100000a24010800fc02010207240700010001072407000000000c2402000000000200000000090401000001020000090401010101020000090501091002e0000007250100040180090402000001020000090402010101020000082402018100000009058209000080030507250181bc0000"], 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) syz_usb_ep_write(r1, 0x2, 0xd9, &(0x7f0000000240)="25debf4e2d7781aa83824de05dde8a4a6c4f2e1a37eee8c851573881784c69287be16d276b4c53f56f6c1657ee49b805fd0a6e14e9400e274962715671c89fa4da0372e13fa530545c8ce34bc388d3e81c211022bb1a3089eec8e1b49d38ced9c692af883fe243f50e4eef7dfa5c183b3d93fbd8ec62182af0e2425324e8292266ec15e0c7e00b9a11cb51bb971866c015edfee66bf25b9abb2506030a2411eb32a94d09e2d4c2ca0ef1537a0aa88e24ef5af6b0c4225f5143c76fe8a0b2556a52ba71e66dff88fadb0adca8c29d6998e32ed0ad13d9ae6376") 03:07:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x3000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:57 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:07:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x7, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 806.766069][ T4843] usb 5-1: USB disconnect, device number 13 03:07:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000007fffffff00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x8, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 806.869895][ T22] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 806.884544][ T22] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 806.895491][ T22] usb 2-1: Product: syz [ 806.927915][ T22] usb 2-1: Manufacturer: syz [ 806.933013][ T22] usb 2-1: SerialNumber: syz [ 806.945800][ T22] usb 2-1: config 0 descriptor?? [ 807.089494][ T3694] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 807.241391][ T22] ldusb 2-1:0.0: Interrupt in endpoint not found [ 807.249598][ T4843] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 807.258136][ T22] usb 2-1: USB disconnect, device number 79 [ 807.469453][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.480530][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 807.489723][ T4843] usb 5-1: Using ep0 maxpacket: 32 [ 807.496540][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.512834][ T3694] usb 4-1: config 0 descriptor?? [ 807.609475][ T4843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.624679][ T4843] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.789468][ T4843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 807.798588][ T4843] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 807.807793][ T4843] usb 5-1: Product: syz [ 807.812145][ T4843] usb 5-1: Manufacturer: syz [ 807.816758][ T4843] usb 5-1: SerialNumber: syz [ 807.823671][ T4843] usb 5-1: config 0 descriptor?? [ 807.862178][ T4843] ldusb 5-1:0.0: Interrupt in endpoint not found 03:07:58 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000000009040009058703013581648fe898411cb876447ed84ddb9834203d1fbe3042cfa0ca1b59ac735664e543c6ec3315af3bb3ebb9d5cb33a1172646db427a904a6698"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async, rerun: 32) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (rerun: 32) syz_usb_disconnect(r0) 03:07:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x5000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:07:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x9, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:07:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000009effffff00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:07:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000f0ffffff00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 808.001080][ T3694] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 808.053187][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0057/input/input113 [ 808.149685][ T3694] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 808.202525][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.221637][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.260368][ T22] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 808.333412][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.339835][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.435540][ T3690] usb 4-1: USB disconnect, device number 14 [ 808.509516][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 808.649682][ T22] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 808.665016][ T22] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 808.677952][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 808.850755][ T22] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 808.859901][ T22] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 808.868324][ T22] usb 2-1: Product: syz [ 808.872577][ T22] usb 2-1: Manufacturer: syz [ 808.877768][ T22] usb 2-1: SerialNumber: syz [ 808.884263][ T22] usb 2-1: config 0 descriptor?? 03:07:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7}]}}, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902810003010500000904000000010100000a24010800fc02010207240700010001072407000000000c2402000000000200000000090401000001020000090401010101020000090501091002e0000007250100040180090402000001020000090402010101020000082402018100000009058209000080030507250181bc0000"], 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_ep_write(r1, 0x2, 0xd9, &(0x7f0000000240)="25debf4e2d7781aa83824de05dde8a4a6c4f2e1a37eee8c851573881784c69287be16d276b4c53f56f6c1657ee49b805fd0a6e14e9400e274962715671c89fa4da0372e13fa530545c8ce34bc388d3e81c211022bb1a3089eec8e1b49d38ced9c692af883fe243f50e4eef7dfa5c183b3d93fbd8ec62182af0e2425324e8292266ec15e0c7e00b9a11cb51bb971866c015edfee66bf25b9abb2506030a2411eb32a94d09e2d4c2ca0ef1537a0aa88e24ef5af6b0c4225f5143c76fe8a0b2556a52ba71e66dff88fadb0adca8c29d6998e32ed0ad13d9ae6376") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7}]}}, 0x0}, 0x0) (async) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902810003010500000904000000010100000a24010800fc02010207240700010001072407000000000c2402000000000200000000090401000001020000090401010101020000090501091002e0000007250100040180090402000001020000090402010101020000082402018100000009058209000080030507250181bc0000"], 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) syz_usb_ep_write(r1, 0x2, 0xd9, &(0x7f0000000240)="25debf4e2d7781aa83824de05dde8a4a6c4f2e1a37eee8c851573881784c69287be16d276b4c53f56f6c1657ee49b805fd0a6e14e9400e274962715671c89fa4da0372e13fa530545c8ce34bc388d3e81c211022bb1a3089eec8e1b49d38ced9c692af883fe243f50e4eef7dfa5c183b3d93fbd8ec62182af0e2425324e8292266ec15e0c7e00b9a11cb51bb971866c015edfee66bf25b9abb2506030a2411eb32a94d09e2d4c2ca0ef1537a0aa88e24ef5af6b0c4225f5143c76fe8a0b2556a52ba71e66dff88fadb0adca8c29d6998e32ed0ad13d9ae6376") (async) 03:07:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x6000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 808.970304][T12115] __nla_validate_parse: 14 callbacks suppressed [ 808.970324][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 808.987899][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.170754][ T22] ldusb 2-1:0.0: Interrupt in endpoint not found [ 809.178732][ T22] usb 2-1: USB disconnect, device number 80 [ 809.289536][ T3669] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 809.709533][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.720620][ T3669] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 809.729751][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.740678][ T3669] usb 4-1: config 0 descriptor?? 03:08:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000004000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0xa, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:00 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x7000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 809.866496][ T3690] usb 5-1: USB disconnect, device number 14 [ 809.901228][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000002000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 809.924114][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.948279][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 809.978405][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:00 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cb81000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x201, 0x8, 0xc1, 0x81, 0xff, 0xff}, 0x38, &(0x7f0000001280)={0x5, 0xf, 0x38, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x55, 0x2, 0x7ffffff, 0xf000, 0x1, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b57677bc747a399fb65c10dc6357167c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x7f, 0x1, 0x7, 0x4}]}, 0x5, [{0xd7, &(0x7f00000012c0)=@string={0xd7, 0x3, "dce1842e0f643ef3dd03ab5f77dd2c98d4d8ced6485329647fd7e6781b00957b27237dd270fcd27db9601b12978369efe56c173eb499af94c0528934ff8a8ec9a820210962ff7fc5c2f3602966183f8f78d05023655a04a86e76d8b766ca47df6d2d107515c66c4ee606d0af7bdf9dc5d877e7dd21b62cccfdd31e242c6cce4b724d8da64f02e637009d59e17449ea780b581813f66b48767fcf7e10d9ccc2649c08c9bde0bc573bf3d7a531dbadeac0ddf4803b35bcce76b908838a5bba0a633939d2914c2254f33b39886196e0e8dca406bf035f"}}, {0xcf, &(0x7f00000013c0)=@string={0xcf, 0x3, "2155a8f968b843162b7163192f2f58b9cb62cbb2850945a65e1b373f4e140ccf423cae6be91cd0367222343a544e03a8b5535dac0314e23afb8df4ca252cdc2b8142459d9f6a89073b83fc1863517e37cca640a51dc51fbb175521dcc0d9dd64c9f22db91916ed51a53bf4f0a57a89cde8d2aca928e19e3561a885944d2d28d1087cdb11a9f74098ce712d2e20db7836481a20ef833fa116ab5dec52f680f8a400d9d55d946fae7a516db663d1fd726d45a27ff4625251ae8614095f04635f10bab5234820493c10a3937271dd"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x437}}, {0x1a, &(0x7f0000001540)=@string={0x1a, 0x3, "b4f0e0507064d221bb8ec3ff98eb783a9ea5dfc25930ae80"}}]}) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x10, 0xba, &(0x7f0000001180)="50ebe8c5fb692919bbb76e2dc079e54af70d38db68d2fbab9cc7607de5184ad39f3182ab43c8dd8cba060952cc01a34ee21c8a792ab10aec7ee769593d01a3d4b4b8fe45b6d0349fe95acbbc75c7395416a0cedf6e655d1a08c6bac0ede84e7d97e525c23df13363b526cf0f2819b8f4bfc78a1c30a493f4d74e6cc30760aa69d71b2196acfd6c3923b63c0ccaf40c954878a99d53d48d40877c314dad630f151cb1ab90b8b120fe2109c9c6d6d0c7d1416989b9f7c1a97d4c76") 03:08:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000003000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000004000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 810.082511][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.097567][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.115873][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.137072][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.200893][ T3669] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 810.214070][ T3669] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0058/input/input114 [ 810.295888][ T3669] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 810.319525][ T3690] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 810.359563][ T4833] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 810.404972][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.414607][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.570708][ T3690] usb 5-1: Using ep0 maxpacket: 32 03:08:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000100000921000000012297090905c10308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:08:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x9000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 810.619335][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 810.627252][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.636059][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.649107][ T3669] usb 4-1: USB disconnect, device number 15 [ 810.689731][ T3690] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 810.739742][ T4833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 810.869483][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 810.878620][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 810.887152][ T3690] usb 5-1: Product: syz [ 810.892267][ T3690] usb 5-1: Manufacturer: syz [ 810.896913][ T3690] usb 5-1: SerialNumber: syz [ 810.907677][ T3690] usb 5-1: config 0 descriptor?? [ 810.929718][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 810.938794][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 810.951006][ T3690] ldusb 5-1:0.0: Interrupt in endpoint not found [ 810.965238][ T4833] usb 2-1: Product: syz [ 810.969549][ T4833] usb 2-1: Manufacturer: syz [ 810.974175][ T4833] usb 2-1: SerialNumber: syz [ 810.980580][ T4833] usb 2-1: config 0 descriptor?? [ 811.021985][ T4833] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 811.034079][ T4833] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 811.129484][ T3669] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 811.391453][ T4833] usb 2-1: USB disconnect, device number 81 [ 811.400033][T12136] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 811.539631][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 811.547493][ T3669] usb 4-1: can't read configurations, error -61 [ 811.709374][ T3669] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 812.129682][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 812.137467][ T3669] usb 4-1: can't read configurations, error -61 [ 812.144541][ T3669] usb usb4-port1: attempt power cycle [ 812.579365][ T3669] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 812.829429][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 812.837041][ T3669] usb 4-1: can't read configurations, error -61 03:08:03 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xa000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000006000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 812.904342][ T3690] usb 5-1: USB disconnect, device number 15 [ 812.989485][ T3669] usb 4-1: new high-speed USB device number 19 using dummy_hcd 03:08:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0xe, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000007000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:03 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cb81000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) syz_usb_disconnect(r0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x201, 0x8, 0xc1, 0x81, 0xff, 0xff}, 0x38, &(0x7f0000001280)={0x5, 0xf, 0x38, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x55, 0x2, 0x7ffffff, 0xf000, 0x1, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b57677bc747a399fb65c10dc6357167c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x7f, 0x1, 0x7, 0x4}]}, 0x5, [{0xd7, &(0x7f00000012c0)=@string={0xd7, 0x3, "dce1842e0f643ef3dd03ab5f77dd2c98d4d8ced6485329647fd7e6781b00957b27237dd270fcd27db9601b12978369efe56c173eb499af94c0528934ff8a8ec9a820210962ff7fc5c2f3602966183f8f78d05023655a04a86e76d8b766ca47df6d2d107515c66c4ee606d0af7bdf9dc5d877e7dd21b62cccfdd31e242c6cce4b724d8da64f02e637009d59e17449ea780b581813f66b48767fcf7e10d9ccc2649c08c9bde0bc573bf3d7a531dbadeac0ddf4803b35bcce76b908838a5bba0a633939d2914c2254f33b39886196e0e8dca406bf035f"}}, {0xcf, &(0x7f00000013c0)=@string={0xcf, 0x3, "2155a8f968b843162b7163192f2f58b9cb62cbb2850945a65e1b373f4e140ccf423cae6be91cd0367222343a544e03a8b5535dac0314e23afb8df4ca252cdc2b8142459d9f6a89073b83fc1863517e37cca640a51dc51fbb175521dcc0d9dd64c9f22db91916ed51a53bf4f0a57a89cde8d2aca928e19e3561a885944d2d28d1087cdb11a9f74098ce712d2e20db7836481a20ef833fa116ab5dec52f680f8a400d9d55d946fae7a516db663d1fd726d45a27ff4625251ae8614095f04635f10bab5234820493c10a3937271dd"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x437}}, {0x1a, &(0x7f0000001540)=@string={0x1a, 0x3, "b4f0e0507064d221bb8ec3ff98eb783a9ea5dfc25930ae80"}}]}) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x10, 0xba, &(0x7f0000001180)="50ebe8c5fb692919bbb76e2dc079e54af70d38db68d2fbab9cc7607de5184ad39f3182ab43c8dd8cba060952cc01a34ee21c8a792ab10aec7ee769593d01a3d4b4b8fe45b6d0349fe95acbbc75c7395416a0cedf6e655d1a08c6bac0ede84e7d97e525c23df13363b526cf0f2819b8f4bfc78a1c30a493f4d74e6cc30760aa69d71b2196acfd6c3923b63c0ccaf40c954878a99d53d48d40877c314dad630f151cb1ab90b8b120fe2109c9c6d6d0c7d1416989b9f7c1a97d4c76") 03:08:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xb000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000008000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 813.083647][ T4833] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 813.259694][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 813.267347][ T3669] usb 4-1: can't read configurations, error -61 [ 813.274129][ T3669] usb usb4-port1: unable to enumerate USB device [ 813.369683][ T3690] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 813.549602][ T4833] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 813.629482][ T3690] usb 5-1: Using ep0 maxpacket: 32 03:08:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000100000921000000012297090905c10308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000100000921000000012297090905c10308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:08:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000009000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0xf, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xc000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 813.759792][ T3690] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 813.829587][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 813.969552][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 813.978791][ T4833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 813.994415][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 814.004140][ T3690] usb 5-1: Product: syz [ 814.008519][ T3690] usb 5-1: Manufacturer: syz [ 814.013840][ T3690] usb 5-1: SerialNumber: syz [ 814.028854][ T3690] usb 5-1: config 0 descriptor?? [ 814.070569][ T3690] ldusb 5-1:0.0: Interrupt in endpoint not found [ 814.170055][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 814.179136][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 814.187934][ T4833] usb 2-1: Product: syz [ 814.192169][ T4833] usb 2-1: Manufacturer: syz [ 814.196770][ T4833] usb 2-1: SerialNumber: syz [ 814.203462][ T4833] usb 2-1: config 0 descriptor?? [ 814.219440][ T4843] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 814.241369][ T4833] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 814.255961][ T4833] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 814.521939][ T3731] usb 2-1: USB disconnect, device number 82 [ 814.530943][ T3731] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 814.669526][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 814.677173][ T4843] usb 4-1: can't read configurations, error -61 [ 814.829379][ T4843] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 815.279610][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 815.287328][ T4843] usb 4-1: can't read configurations, error -61 [ 815.294007][ T4843] usb usb4-port1: attempt power cycle [ 815.719346][ T4843] usb 4-1: new high-speed USB device number 22 using dummy_hcd 03:08:06 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xe000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000a000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x10, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:06 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cb81000905870301"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x201, 0x8, 0xc1, 0x81, 0xff, 0xff}, 0x38, &(0x7f0000001280)={0x5, 0xf, 0x38, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x55, 0x2, 0x7ffffff, 0xf000, 0x1, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b57677bc747a399fb65c10dc6357167c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x7f, 0x1, 0x7, 0x4}]}, 0x5, [{0xd7, &(0x7f00000012c0)=@string={0xd7, 0x3, "dce1842e0f643ef3dd03ab5f77dd2c98d4d8ced6485329647fd7e6781b00957b27237dd270fcd27db9601b12978369efe56c173eb499af94c0528934ff8a8ec9a820210962ff7fc5c2f3602966183f8f78d05023655a04a86e76d8b766ca47df6d2d107515c66c4ee606d0af7bdf9dc5d877e7dd21b62cccfdd31e242c6cce4b724d8da64f02e637009d59e17449ea780b581813f66b48767fcf7e10d9ccc2649c08c9bde0bc573bf3d7a531dbadeac0ddf4803b35bcce76b908838a5bba0a633939d2914c2254f33b39886196e0e8dca406bf035f"}}, {0xcf, &(0x7f00000013c0)=@string={0xcf, 0x3, "2155a8f968b843162b7163192f2f58b9cb62cbb2850945a65e1b373f4e140ccf423cae6be91cd0367222343a544e03a8b5535dac0314e23afb8df4ca252cdc2b8142459d9f6a89073b83fc1863517e37cca640a51dc51fbb175521dcc0d9dd64c9f22db91916ed51a53bf4f0a57a89cde8d2aca928e19e3561a885944d2d28d1087cdb11a9f74098ce712d2e20db7836481a20ef833fa116ab5dec52f680f8a400d9d55d946fae7a516db663d1fd726d45a27ff4625251ae8614095f04635f10bab5234820493c10a3937271dd"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x437}}, {0x1a, &(0x7f0000001540)=@string={0x1a, 0x3, "b4f0e0507064d221bb8ec3ff98eb783a9ea5dfc25930ae80"}}]}) (async, rerun: 32) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write(r2, 0x10, 0xba, &(0x7f0000001180)="50ebe8c5fb692919bbb76e2dc079e54af70d38db68d2fbab9cc7607de5184ad39f3182ab43c8dd8cba060952cc01a34ee21c8a792ab10aec7ee769593d01a3d4b4b8fe45b6d0349fe95acbbc75c7395416a0cedf6e655d1a08c6bac0ede84e7d97e525c23df13363b526cf0f2819b8f4bfc78a1c30a493f4d74e6cc30760aa69d71b2196acfd6c3923b63c0ccaf40c954878a99d53d48d40877c314dad630f151cb1ab90b8b120fe2109c9c6d6d0c7d1416989b9f7c1a97d4c76") [ 815.948055][ T3731] usb 5-1: USB disconnect, device number 16 [ 815.971864][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 815.977863][T12190] __nla_validate_parse: 14 callbacks suppressed [ 815.977883][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 815.991158][ T4843] usb 4-1: can't read configurations, error -61 03:08:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000b000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 816.024465][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.042998][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000f000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xf000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 816.096060][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 816.169437][ T4843] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 816.193245][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.203689][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.213918][T12194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.225749][T12194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.237474][T12194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.248900][T12194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.289567][ T4833] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 816.399365][ T3731] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 816.429546][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 816.437167][ T4843] usb 4-1: can't read configurations, error -61 [ 816.444345][ T4843] usb usb4-port1: unable to enumerate USB device [ 816.639430][ T3731] usb 5-1: Using ep0 maxpacket: 32 03:08:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000100000921000000012297090905c10308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000100000921000000012297090905c10308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:08:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x11, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000010000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:07 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe09}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20048051) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="0662bd5d1f50200415c397c794a2867bf102e921463f1481163cf9d5a5cb264967fca88c6e315d60d17e0d2949d2987fd82a167a92a1f8ffb918d90940644c60606f79cdfee6f3b11f38b937bd0bed49f7e7eb47655a369694b91be9262c15d3ce2d14dac78a", 0x66) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) [ 816.759444][ T3731] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 816.816666][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 816.843243][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 816.929553][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 816.938795][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 816.947423][ T3731] usb 5-1: Product: syz [ 816.951883][ T3731] usb 5-1: Manufacturer: syz [ 816.956525][ T3731] usb 5-1: SerialNumber: syz [ 816.974180][ T3731] usb 5-1: config 0 descriptor?? [ 817.025046][ T3731] ldusb 5-1:0.0: Interrupt in endpoint not found [ 817.199338][ T4833] usb 2-1: device descriptor read/64, error -71 [ 817.249384][ T4843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 817.469408][ T4833] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 817.649490][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 817.657133][ T4843] usb 4-1: can't read configurations, error -61 [ 817.709353][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 817.809515][ T4843] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 817.829631][ T4833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 818.003478][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 818.012667][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 818.021350][ T4833] usb 2-1: Product: syz [ 818.025569][ T4833] usb 2-1: Manufacturer: syz [ 818.030257][ T4833] usb 2-1: SerialNumber: syz [ 818.045317][ T4833] usb 2-1: config 0 descriptor?? [ 818.090810][ T4833] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 818.114133][ T4833] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 818.209498][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 818.217213][ T4843] usb 4-1: can't read configurations, error -61 [ 818.223862][ T4843] usb usb4-port1: attempt power cycle [ 818.457891][ T4833] usb 2-1: USB disconnect, device number 84 [ 818.459316][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 818.470236][T12213] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 818.477719][T12217] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 818.649501][ T4843] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 818.919530][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 818.927158][ T4843] usb 4-1: can't read configurations, error -61 03:08:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000011000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x23, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:09 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 819.035169][ T3731] usb 5-1: USB disconnect, device number 17 [ 819.071874][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0000000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 819.088620][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.099680][ T4843] usb 4-1: new high-speed USB device number 27 using dummy_hcd 03:08:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x11000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000030000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 819.349873][ T4843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 819.357554][ T4843] usb 4-1: can't read configurations, error -61 [ 819.364251][ T4843] usb usb4-port1: unable to enumerate USB device [ 819.491795][ T3731] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 819.749391][ T3731] usb 5-1: Using ep0 maxpacket: 32 03:08:10 executing program 3: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000700)={&(0x7f0000000600)=""/205, 0xcd}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x2b33e4e99ca494b0, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x32, 0x4, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x1, 0xd2, 0x1, {0x22, 0xaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x200, 0x6, 0x4, 0x1f, 0x0, 0x1}, 0x6c, &(0x7f00000007c0)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfb, 0x2, 0x4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x561}, @generic={0x4d, 0x10, 0x2, "1f1274e247e8108c465f3549ece66a9d77d35bd914c47095958ab4946928c4f0684d2f191993babcda2a554f70c7e21eeda9295464913b617d9f4766308d0e757e4c78a6f2743013feb7"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_control_io(r0, 0xfffffffffffffffc, &(0x7f0000000540)={0x84, &(0x7f00000000c0)={0x40, 0x8, 0x5b, "e7c756c7185f2d06816fcb42b907c516d18e4cb831283672cb9990a6c99d375c96ef2a00c2bcdb5159489e2a1865431594b82b4c8b7748e576ca856ee7e51f7919410639351e063d7afcde7ea2f3ed0718eda972c5a71f7915bd23"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000240)={0x20, 0x0, 0x8, {0x4, 0x8, [0xf0f0]}}, &(0x7f0000000280)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000002c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000300)={0x40, 0xb, 0x2, "e6db"}, &(0x7f0000000340)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000380)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, &(0x7f00000003c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000400)={0x40, 0x19, 0x2, "e3fc"}, &(0x7f0000000440)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000480)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000500)={0x40, 0x21, 0x1, 0x1}}) 03:08:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000050000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x2a030000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:10 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe09}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20048051) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="0662bd5d1f50200415c397c794a2867bf102e921463f1481163cf9d5a5cb264967fca88c6e315d60d17e0d2949d2987fd82a167a92a1f8ffb918d90940644c60606f79cdfee6f3b11f38b937bd0bed49f7e7eb47655a369694b91be9262c15d3ce2d14dac78a", 0x66) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) [ 819.802846][ T4833] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 819.869611][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 03:08:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000060000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 820.079517][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 820.088585][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 820.097868][ T3731] usb 5-1: Product: syz [ 820.102264][ T3731] usb 5-1: Manufacturer: syz [ 820.106857][ T3731] usb 5-1: SerialNumber: syz [ 820.123103][ T3731] usb 5-1: config 0 descriptor?? [ 820.174311][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 820.193464][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 820.239373][ T4833] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 820.309450][ T3694] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 820.489898][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 820.629552][ T4833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 820.669423][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.680617][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 820.690723][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.703040][ T3694] usb 4-1: config 0 descriptor?? [ 820.839557][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 820.852664][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 820.861675][ T4833] usb 2-1: Product: syz [ 820.865855][ T4833] usb 2-1: Manufacturer: syz [ 820.870952][ T4833] usb 2-1: SerialNumber: syz [ 820.885426][ T4833] usb 2-1: config 0 descriptor?? [ 820.931367][ T4833] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 820.943335][ T4833] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 820.965629][ T3669] usb 5-1: USB disconnect, device number 18 [ 820.981362][ T3669] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 821.133708][ T4833] usb 2-1: USB disconnect, device number 85 [ 821.143899][ T4833] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 821.180963][ T3694] keytouch 0003:0926:3333.0059: fixing up Keytouch IEC report descriptor [ 821.193303][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0059/input/input115 [ 821.274049][ T3694] keytouch 0003:0926:3333.0059: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 03:08:11 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe800090587"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x3f000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x2, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000070000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000090000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 821.507470][T12254] __nla_validate_parse: 10 callbacks suppressed [ 821.507491][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 821.527384][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 821.548822][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000a0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 821.583669][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 821.819558][ T3690] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 822.069352][ T3690] usb 5-1: Using ep0 maxpacket: 32 [ 822.189510][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 822.389721][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 822.398860][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 822.407783][ T3690] usb 5-1: Product: syz [ 822.412366][ T3690] usb 5-1: Manufacturer: syz [ 822.416962][ T3690] usb 5-1: SerialNumber: syz [ 822.435778][ T3690] usb 5-1: config 0 descriptor?? [ 822.481345][ T3690] ldusb 5-1:0.0: Interrupt in endpoint not found 03:08:13 executing program 3: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000700)={&(0x7f0000000600)=""/205, 0xcd}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x2b33e4e99ca494b0, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x32, 0x4, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x1, 0xd2, 0x1, {0x22, 0xaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x200, 0x6, 0x4, 0x1f, 0x0, 0x1}, 0x6c, &(0x7f00000007c0)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfb, 0x2, 0x4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x561}, @generic={0x4d, 0x10, 0x2, "1f1274e247e8108c465f3549ece66a9d77d35bd914c47095958ab4946928c4f0684d2f191993babcda2a554f70c7e21eeda9295464913b617d9f4766308d0e757e4c78a6f2743013feb7"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2801}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) syz_usb_control_io(r0, 0xfffffffffffffffc, &(0x7f0000000540)={0x84, &(0x7f00000000c0)={0x40, 0x8, 0x5b, "e7c756c7185f2d06816fcb42b907c516d18e4cb831283672cb9990a6c99d375c96ef2a00c2bcdb5159489e2a1865431594b82b4c8b7748e576ca856ee7e51f7919410639351e063d7afcde7ea2f3ed0718eda972c5a71f7915bd23"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000240)={0x20, 0x0, 0x8, {0x4, 0x8, [0xf0f0]}}, &(0x7f0000000280)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000002c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000300)={0x40, 0xb, 0x2, "e6db"}, &(0x7f0000000340)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000380)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, &(0x7f00000003c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000400)={0x40, 0x19, 0x2, "e3fc"}, &(0x7f0000000440)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000480)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000500)={0x40, 0x21, 0x1, 0x1}}) 03:08:13 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe09}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20048051) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async, rerun: 32) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="0662bd5d1f50200415c397c794a2867bf102e921463f1481163cf9d5a5cb264967fca88c6e315d60d17e0d2949d2987fd82a167a92a1f8ffb918d90940644c60606f79cdfee6f3b11f38b937bd0bed49f7e7eb47655a369694b91be9262c15d3ce2d14dac78a", 0x66) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) 03:08:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x3, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x596e3996, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000b0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000040)='l', 0x1) read$char_usb(r0, &(0x7f00000000c0)=""/178, 0xb2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) [ 822.902353][ T3690] usb 4-1: USB disconnect, device number 28 [ 822.933025][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 822.968965][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 822.999158][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 823.040212][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.409393][ T3690] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 823.449453][ T4833] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 823.692070][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 823.779550][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.790862][ T3690] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.800234][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.811507][ T4833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 823.823390][ T3690] usb 4-1: config 0 descriptor?? [ 823.979529][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 823.988748][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 823.997421][ T4833] usb 2-1: Product: syz [ 824.001670][ T4833] usb 2-1: Manufacturer: syz [ 824.006272][ T4833] usb 2-1: SerialNumber: syz [ 824.024919][ T4833] usb 2-1: config 0 descriptor?? [ 824.070486][ T4833] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 824.091914][ T4833] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 824.359576][ T3690] usbhid 4-1:0.0: can't add hid device: -71 [ 824.365578][ T3690] usbhid: probe of 4-1:0.0 failed with error -71 [ 824.378116][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.387470][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.388818][ T3690] usb 4-1: USB disconnect, device number 29 03:08:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x60000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:14 executing program 3: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000700)={&(0x7f0000000600)=""/205, 0xcd}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x2b33e4e99ca494b0, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x32, 0x4, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x1, 0xd2, 0x1, {0x22, 0xaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x200, 0x6, 0x4, 0x1f, 0x0, 0x1}, 0x6c, &(0x7f00000007c0)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfb, 0x2, 0x4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x561}, @generic={0x4d, 0x10, 0x2, "1f1274e247e8108c465f3549ece66a9d77d35bd914c47095958ab4946928c4f0684d2f191993babcda2a554f70c7e21eeda9295464913b617d9f4766308d0e757e4c78a6f2743013feb7"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2801}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_control_io(r0, 0xfffffffffffffffc, &(0x7f0000000540)={0x84, &(0x7f00000000c0)={0x40, 0x8, 0x5b, "e7c756c7185f2d06816fcb42b907c516d18e4cb831283672cb9990a6c99d375c96ef2a00c2bcdb5159489e2a1865431594b82b4c8b7748e576ca856ee7e51f7919410639351e063d7afcde7ea2f3ed0718eda972c5a71f7915bd23"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000240)={0x20, 0x0, 0x8, {0x4, 0x8, [0xf0f0]}}, &(0x7f0000000280)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000002c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000300)={0x40, 0xb, 0x2, "e6db"}, &(0x7f0000000340)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000380)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, &(0x7f00000003c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000400)={0x40, 0x19, 0x2, "e3fc"}, &(0x7f0000000440)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000480)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000500)={0x40, 0x21, 0x1, 0x1}}) 03:08:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000f0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x4, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:14 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe800090587"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 824.560642][ T4833] usb 5-1: USB disconnect, device number 19 [ 824.599454][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000110000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 824.618853][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x5, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000003f0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x65580000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f00000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x6, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 824.979517][ T3690] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 825.039414][ T4833] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 825.280553][ T4833] usb 5-1: Using ep0 maxpacket: 32 [ 825.339709][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.350763][ T3690] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 825.360541][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.375948][ T3690] usb 4-1: config 0 descriptor?? [ 825.399790][ T4833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 825.569644][ T4833] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 825.578721][ T4833] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 825.587350][ T4833] usb 5-1: Product: syz [ 825.591615][ T4833] usb 5-1: Manufacturer: syz [ 825.596235][ T4833] usb 5-1: SerialNumber: syz [ 825.602818][ T4833] usb 5-1: config 0 descriptor?? [ 825.641881][ T4833] ldusb 5-1:0.0: Interrupt in endpoint not found [ 825.680829][ T3690] keytouch 0003:0926:3333.005A: fixing up Keytouch IEC report descriptor [ 825.692598][ T3690] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.005A/input/input116 [ 825.776860][ T3690] keytouch 0003:0926:3333.005A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 827.591126][ T3669] usb 4-1: USB disconnect, device number 30 [ 827.657276][ T4840] usb 5-1: USB disconnect, device number 20 03:08:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000040)='l', 0x1) read$char_usb(r0, &(0x7f00000000c0)=""/178, 0xb2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r0, &(0x7f0000000040)='l', 0x1) (async) read$char_usb(r0, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) 03:08:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x700c0000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x7, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000300000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000881004026093333010000000009040000011b0100960021000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:08:19 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe800090587"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 829.299478][T12279] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 829.345989][T12318] __nla_validate_parse: 8 callbacks suppressed [ 829.346009][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.359704][ T4840] usb 2-1: USB disconnect, device number 86 [ 829.373367][ T4840] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:08:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000400300000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 829.389053][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.411299][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x81000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000034000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 829.442033][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000fffff000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x8, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 829.509950][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.523413][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 829.580194][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.602890][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.638505][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.648117][ T22] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 829.657778][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.669953][ T3690] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 829.799506][ T4840] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 829.929357][ T3690] usb 5-1: Using ep0 maxpacket: 32 [ 829.939490][ T22] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 830.059467][ T4840] usb 2-1: Using ep0 maxpacket: 32 [ 830.059489][ T22] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 830.064813][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 830.079974][ T22] usb 4-1: can't read configurations, error -61 [ 830.199489][ T4840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 830.239423][ T22] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 830.249662][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 830.258861][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 830.267414][ T3690] usb 5-1: Product: syz [ 830.271693][ T3690] usb 5-1: Manufacturer: syz [ 830.276309][ T3690] usb 5-1: SerialNumber: syz [ 830.285322][ T3690] usb 5-1: config 0 descriptor?? [ 830.331879][ T3690] ldusb 5-1:0.0: Interrupt in endpoint not found [ 830.369580][ T4840] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 830.378641][ T4840] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 830.392057][ T4840] usb 2-1: Product: syz [ 830.396230][ T4840] usb 2-1: Manufacturer: syz [ 830.402686][ T4840] usb 2-1: SerialNumber: syz [ 830.409005][ T4840] usb 2-1: config 0 descriptor?? [ 830.453336][ T4840] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 830.466286][ T4840] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 830.559616][ T22] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 830.689527][ T22] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 830.701792][ T22] usb 4-1: can't read configurations, error -61 [ 830.708174][ T22] usb usb4-port1: attempt power cycle [ 830.757707][T12338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.768870][T12338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.149381][ T22] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 831.299999][ T22] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 831.450718][ T22] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 831.458384][ T22] usb 4-1: can't read configurations, error -61 [ 831.619358][ T22] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 831.769489][ T22] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 831.909589][ T22] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 831.917346][ T22] usb 4-1: can't read configurations, error -61 [ 831.924116][ T22] usb usb4-port1: unable to enumerate USB device [ 832.359661][ T4840] usb 5-1: USB disconnect, device number 21 03:08:26 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000040)='l', 0x1) read$char_usb(r0, &(0x7f00000000c0)=""/178, 0xb2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r0, &(0x7f0000000040)='l', 0x1) (async) read$char_usb(r0, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) 03:08:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000001000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x9, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x96396e59, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000881004026093333010000000009040000011b0100960021000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000881004026093333010000000009040000011b0100960021000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:08:26 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe80009058703"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 835.689560][T12323] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 835.732110][ T4843] usb 2-1: USB disconnect, device number 87 [ 835.738450][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 835.761390][ T4843] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:08:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 835.777754][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000003000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 835.804263][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 835.839073][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000005000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 835.942103][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.954890][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 835.967050][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.998574][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 836.009417][ T3694] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 836.032720][ T3669] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 836.199666][ T4843] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 836.269425][ T3694] usb 5-1: Using ep0 maxpacket: 32 [ 836.339640][ T3669] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 836.409604][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 836.420612][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 836.439394][ T4843] usb 2-1: Using ep0 maxpacket: 32 [ 836.469558][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 836.477228][ T3669] usb 4-1: can't read configurations, error -61 [ 836.559518][ T4843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 836.609513][ T3694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 836.618608][ T3694] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 836.632166][ T3694] usb 5-1: Product: syz [ 836.636378][ T3694] usb 5-1: Manufacturer: syz [ 836.641381][ T3669] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 836.650770][ T3694] usb 5-1: SerialNumber: syz [ 836.656932][ T3694] usb 5-1: config 0 descriptor?? [ 836.701146][ T3694] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 836.713494][ T3694] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 836.729924][ T4843] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 836.739032][ T4843] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 836.756640][ T4843] usb 2-1: Product: syz [ 836.761172][ T4843] usb 2-1: Manufacturer: syz [ 836.765908][ T4843] usb 2-1: SerialNumber: syz [ 836.773752][ T4843] usb 2-1: config 0 descriptor?? [ 836.813908][ T4843] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 836.824071][ T4843] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 836.939520][ T3669] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 837.010175][T12356] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 837.017781][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.033583][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.069631][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 837.077229][ T3669] usb 4-1: can't read configurations, error -61 [ 837.084228][ T3669] usb usb4-port1: attempt power cycle 03:08:27 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578c4bd4b0143b66b2effffffffffff0001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f0000000280)=""/187, 0xbb) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/120, 0x78) syz_usb_disconnect(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}], 0x2}, 0x400800}], 0x1, 0x122, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) shutdown(r3, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x81) read$char_usb(r1, &(0x7f0000000440)=""/236, 0xec) 03:08:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000006000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xb, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 837.242998][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.254300][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.260295][T12375] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 837.277282][ T3694] usb 2-1: USB disconnect, device number 88 [ 837.314775][ T3694] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 837.323638][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 837.346080][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 837.519572][ T3669] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 837.669720][ T3669] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 837.749419][ T3694] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 837.821213][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 837.828838][ T3669] usb 4-1: can't read configurations, error -61 [ 837.989376][ T3669] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 838.009436][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 838.052238][ T3694] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 838.159638][ T3669] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 838.209492][ T3694] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 838.217288][ T3694] usb 2-1: can't read configurations, error -61 [ 838.299539][ T3669] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 838.307143][ T3669] usb 4-1: can't read configurations, error -61 [ 838.314555][ T3669] usb usb4-port1: unable to enumerate USB device [ 838.379419][ T3694] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 838.629495][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 838.689814][ T3694] usb 2-1: too many configurations: 189, using maximum allowed: 8 03:08:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000881004026093333010000000009040000011b0100960021000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async, rerun: 64) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (rerun: 64) 03:08:29 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe80009058703"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000007000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xc, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000008000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 838.737857][ T4843] usb 5-1: USB disconnect, device number 22 [ 838.766507][ T4843] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:08:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 838.819658][ T3694] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 838.827284][ T3694] usb 2-1: can't read configurations, error -61 [ 838.845620][ T3694] usb usb2-port1: attempt power cycle 03:08:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000009000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 839.189342][ T4833] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 839.199486][ T4843] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 839.296281][ T3694] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 839.389700][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 839.432261][ T3694] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 839.439479][ T4843] usb 5-1: Using ep0 maxpacket: 32 [ 839.469555][ T4833] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 839.559462][ T3694] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 839.559624][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 839.567340][ T3694] usb 2-1: can't read configurations, error -61 [ 839.589388][ T4833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 839.597020][ T4833] usb 4-1: can't read configurations, error -61 [ 839.603880][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 839.739463][ T3694] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 839.759493][ T4833] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 839.769963][ T4843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 839.779000][ T4843] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 839.787723][ T4843] usb 5-1: Product: syz [ 839.791977][ T4843] usb 5-1: Manufacturer: syz [ 839.796594][ T4843] usb 5-1: SerialNumber: syz [ 839.803186][ T4843] usb 5-1: config 0 descriptor?? [ 839.829521][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 839.840526][ T4843] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 839.856344][ T4843] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 839.871982][ T3694] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 840.029441][ T3694] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 840.037499][ T3694] usb 2-1: can't read configurations, error -61 [ 840.039646][ T4833] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 840.044617][ T3694] usb usb2-port1: unable to enumerate USB device [ 840.179401][ T4833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 840.187022][ T4833] usb 4-1: can't read configurations, error -61 [ 840.193630][ T4833] usb usb4-port1: attempt power cycle 03:08:30 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578c4bd4b0143b66b2effffffffffff0001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f0000000280)=""/187, 0xbb) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/120, 0x78) syz_usb_disconnect(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}], 0x2}, 0x400800}], 0x1, 0x122, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) shutdown(r3, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x81) read$char_usb(r1, &(0x7f0000000440)=""/236, 0xec) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578c4bd4b0143b66b2effffffffffff0001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f0000000280)=""/187, 0xbb) (async) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) (async) read$char_usb(r2, &(0x7f0000000180)=""/120, 0x78) (async) syz_usb_disconnect(r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) (async) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}], 0x2}, 0x400800}], 0x1, 0x122, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) (async) shutdown(r3, 0x1) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x81) (async) read$char_usb(r1, &(0x7f0000000440)=""/236, 0xec) (async) 03:08:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xe, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000a000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 840.407644][T12407] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 840.619514][ T4833] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 840.749601][ T4833] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 840.819351][ T4843] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 840.869519][ T4833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 840.877224][ T4833] usb 4-1: can't read configurations, error -61 [ 841.039466][ T4833] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 841.069378][ T4843] usb 2-1: Using ep0 maxpacket: 32 [ 841.109658][ T4843] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 841.179511][ T4833] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 841.229398][ T4843] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 841.237160][ T4843] usb 2-1: can't read configurations, error -61 [ 841.302781][ T4833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 841.310526][ T4833] usb 4-1: can't read configurations, error -61 [ 841.316971][ T4833] usb usb4-port1: unable to enumerate USB device [ 841.389541][ T4843] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 841.629345][ T4843] usb 2-1: Using ep0 maxpacket: 32 [ 841.669744][ T4843] usb 2-1: too many configurations: 189, using maximum allowed: 8 03:08:32 executing program 3: pause() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 841.789418][ T4843] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 841.799337][ T4843] usb 2-1: can't read configurations, error -61 [ 841.808917][ T4843] usb usb2-port1: attempt power cycle 03:08:32 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe80009058703"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000b000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xf, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 841.847009][ T3731] usb 5-1: USB disconnect, device number 23 [ 841.864491][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:08:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000f000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 841.899068][T12415] __nla_validate_parse: 12 callbacks suppressed [ 841.899087][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 841.931455][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000010000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 841.960877][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000011000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 842.044770][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 842.219444][ T4843] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 842.309333][ T3694] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 842.326264][ T4843] usb 2-1: Using ep0 maxpacket: 32 [ 842.369508][ T4843] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 842.377485][ T3731] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 842.489959][ T4843] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 842.499913][ T4843] usb 2-1: can't read configurations, error -61 [ 842.629444][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 842.659359][ T4843] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 842.729564][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.740793][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 842.749655][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 842.750079][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.761081][ T4843] usb 2-1: Using ep0 maxpacket: 32 [ 842.774222][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 842.780383][ T3694] usb 4-1: config 0 descriptor?? [ 842.819522][ T4843] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 842.939597][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 842.948689][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 842.957510][ T4843] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 842.965145][ T4843] usb 2-1: can't read configurations, error -61 [ 842.971844][ T4843] usb usb2-port1: unable to enumerate USB device [ 842.978321][ T3731] usb 5-1: Product: syz [ 842.982892][ T3731] usb 5-1: Manufacturer: syz [ 842.987499][ T3731] usb 5-1: SerialNumber: syz [ 842.994248][ T3731] usb 5-1: config 0 descriptor?? [ 843.043535][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 843.057560][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 843.260978][ T3694] keytouch 0003:0926:3333.005B: fixing up Keytouch IEC report descriptor [ 843.272374][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.005B/input/input117 03:08:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578c4bd4b0143b66b2effffffffffff0001c6cbe8000905870301"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f0000000280)=""/187, 0xbb) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) (async) read$char_usb(r2, &(0x7f0000000180)=""/120, 0x78) syz_usb_disconnect(r0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}], 0x2}, 0x400800}], 0x1, 0x122, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) (async) shutdown(r3, 0x1) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x81) read$char_usb(r1, &(0x7f0000000440)=""/236, 0xec) 03:08:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000a732c612000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x10, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 843.372182][ T3694] keytouch 0003:0926:3333.005B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 843.431743][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 843.455215][T12438] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 843.485654][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 843.505318][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 843.567520][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 843.598658][T12446] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 03:08:35 executing program 3: pause() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") pause() (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) [ 844.831853][ T3731] usb 4-1: USB disconnect, device number 43 03:08:35 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = dup2(r0, r0) write$char_usb(r1, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000003f000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:35 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="0db3ebed4680da165a423f66065b941cc479b3ad41ae878cbb6eb1cb43b8f71668086b234a3d01d6320223f3acce7ef60431eebb87703450d7a876b9ccf7ecfdfd50536b4091f9a33e54dd5ec2041c2adfe7ac403f6fe8018aaeae4297cd847f60742385353aa8448d44efa5eeec70cc6a2bfc3291f8d6560422b8c78b2ad5ba49118827f68b454cd85ace6fe62d23c43996fffc826591f1a03ce0ccf4016ee4d666660deedb4dce04ee0b5e1d74924728e45b417c7556", 0xb7) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:08:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x11, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 844.967379][ T4843] usb 5-1: USB disconnect, device number 24 [ 844.996338][ T4843] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:08:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000ffffff9e000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 845.010185][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.025177][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x23, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000012c632a7000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x60, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 845.290770][ T4840] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 845.310654][ T3731] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 845.469450][ T4843] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 845.539393][ T4840] usb 2-1: Using ep0 maxpacket: 32 [ 845.659509][ T4840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 845.670872][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.682057][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 845.691457][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.701921][ T3731] usb 4-1: config 0 descriptor?? [ 845.719699][ T4843] usb 5-1: Using ep0 maxpacket: 32 [ 845.839512][ T4840] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 845.848779][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 845.860112][ T4840] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 845.868580][ T4840] usb 2-1: Product: syz [ 845.872979][ T4840] usb 2-1: Manufacturer: syz [ 845.877603][ T4840] usb 2-1: SerialNumber: syz [ 845.883952][ T4840] usb 2-1: config 0 descriptor?? [ 845.921128][ T4840] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 845.933446][ T4840] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 846.030850][ T4843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 846.043415][ T4843] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 846.051956][ T4843] usb 5-1: Product: syz [ 846.056168][ T4843] usb 5-1: Manufacturer: syz [ 846.064032][ T4843] usb 5-1: SerialNumber: syz [ 846.072919][ T4843] usb 5-1: config 0 descriptor?? [ 846.112282][ T4843] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 846.127998][ T4843] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 846.160982][ T3731] keytouch 0003:0926:3333.005C: fixing up Keytouch IEC report descriptor [ 846.173217][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.005C/input/input118 [ 846.254494][ T3731] keytouch 0003:0926:3333.005C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 846.293844][ T3731] usb 2-1: USB disconnect, device number 97 [ 846.299858][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 846.307400][T12456] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 846.326936][T12472] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 846.335641][ T5338] usb 5-1: USB disconnect, device number 25 [ 846.350908][ T5338] ldusb 5-1:0.0: LD USB Device #1 now disconnected 03:08:36 executing program 3: pause() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 846.571291][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.583104][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.595876][ T4840] usb 4-1: USB disconnect, device number 44 03:08:37 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = dup2(r0, r0) write$char_usb(r1, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000fffffff0000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 847.079442][ T4840] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 847.169423][ T3690] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 847.409361][ T3690] usb 5-1: Using ep0 maxpacket: 32 [ 847.439420][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.450769][ T4840] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 847.460163][ T4840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.470267][ T4840] usb 4-1: config 0 descriptor?? [ 847.529723][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 847.700843][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 847.709999][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 847.718508][ T3690] usb 5-1: Product: syz [ 847.722987][ T3690] usb 5-1: Manufacturer: syz [ 847.727599][ T3690] usb 5-1: SerialNumber: syz [ 847.736877][ T3690] usb 5-1: config 0 descriptor?? [ 847.781639][ T3690] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 847.801019][ T3690] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:08:38 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="0db3ebed4680da165a423f66065b941cc479b3ad41ae878cbb6eb1cb43b8f71668086b234a3d01d6320223f3acce7ef60431eebb87703450d7a876b9ccf7ecfdfd50536b4091f9a33e54dd5ec2041c2adfe7ac403f6fe8018aaeae4297cd847f60742385353aa8448d44efa5eeec70cc6a2bfc3291f8d6560422b8c78b2ad5ba49118827f68b454cd85ace6fe62d23c43996fffc826591f1a03ce0ccf4016ee4d666660deedb4dce04ee0b5e1d74924728e45b417c7556", 0xb7) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:08:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f0ffff000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 847.950892][ T4840] keytouch 0003:0926:3333.005D: fixing up Keytouch IEC report descriptor [ 847.961313][ T4840] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.005D/input/input119 [ 847.987105][ T3731] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:08:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000007fffffff000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 848.025154][T12490] __nla_validate_parse: 10 callbacks suppressed [ 848.025174][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 848.048191][ T4840] keytouch 0003:0926:3333.005D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 03:08:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000009effffff000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 848.099624][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.109756][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.179197][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0ffffff000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x2, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 848.304790][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.332355][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.365055][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 848.378698][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 848.469527][ T3731] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 848.709358][ T3731] usb 2-1: Using ep0 maxpacket: 32 [ 848.829625][ T3731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 849.031989][ T3731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 849.041164][ T3731] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 849.050227][ T3731] usb 2-1: Product: syz [ 849.054510][ T3731] usb 2-1: Manufacturer: syz [ 849.059200][ T3731] usb 2-1: SerialNumber: syz [ 849.075258][ T3731] usb 2-1: config 0 descriptor?? [ 849.134957][ T3731] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 849.146795][ T3731] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 849.382795][ T3669] usb 2-1: USB disconnect, device number 98 03:08:39 executing program 3: dup(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "c2fe9bc8"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 849.638524][ T3694] usb 4-1: USB disconnect, device number 45 [ 850.029370][ T3694] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 850.389416][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.400554][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 850.409729][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.419623][ T3694] usb 4-1: config 0 descriptor?? [ 850.900881][ T3694] keytouch 0003:0926:3333.005E: fixing up Keytouch IEC report descriptor [ 850.918428][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.005E/input/input120 [ 851.009872][ T3694] keytouch 0003:0926:3333.005E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 851.053049][ T3669] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 851.305876][ T3731] usb 4-1: USB disconnect, device number 46 03:08:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x34, {0x34, 0x4, "1275ca691d458d505212d10895df959e1c765179c2ce1ca34ceef98dab677a60a73bfb1ead8da161d591c97ba99e94de538b"}}, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = dup2(r0, r0) write$char_usb(r1, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000020000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x5, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x3, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:43 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="0db3ebed4680da165a423f66065b941cc479b3ad41ae878cbb6eb1cb43b8f71668086b234a3d01d6320223f3acce7ef60431eebb87703450d7a876b9ccf7ecfdfd50536b4091f9a33e54dd5ec2041c2adfe7ac403f6fe8018aaeae4297cd847f60742385353aa8448d44efa5eeec70cc6a2bfc3291f8d6560422b8c78b2ad5ba49118827f68b454cd85ace6fe62d23c43996fffc826591f1a03ce0ccf4016ee4d666660deedb4dce04ee0b5e1d74924728e45b417c7556", 0xb7) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000180)="0db3ebed4680da165a423f66065b941cc479b3ad41ae878cbb6eb1cb43b8f71668086b234a3d01d6320223f3acce7ef60431eebb87703450d7a876b9ccf7ecfdfd50536b4091f9a33e54dd5ec2041c2adfe7ac403f6fe8018aaeae4297cd847f60742385353aa8448d44efa5eeec70cc6a2bfc3291f8d6560422b8c78b2ad5ba49118827f68b454cd85ace6fe62d23c43996fffc826591f1a03ce0ccf4016ee4d666660deedb4dce04ee0b5e1d74924728e45b417c7556", 0xb7) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) 03:08:43 executing program 3: dup(0xffffffffffffffff) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "c2fe9bc8"}]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 853.069433][T12485] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 853.102838][ T3694] usb 5-1: USB disconnect, device number 26 [ 853.126494][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 853.130907][ T3694] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:08:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000030000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 853.166773][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 853.188286][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000040000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 853.217830][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x6, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000050000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 853.334560][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 853.350274][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 853.361891][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000060000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 853.382204][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 853.429567][T10944] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 853.429567][ T3731] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 853.539369][ T3694] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 853.669410][T10944] usb 2-1: Using ep0 maxpacket: 32 [ 853.779394][ T3694] usb 5-1: Using ep0 maxpacket: 32 [ 853.789655][T10944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 853.852179][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.863370][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 853.872905][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.890095][ T3731] usb 4-1: config 0 descriptor?? [ 853.899539][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 853.959512][T10944] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 853.968740][T10944] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 853.982538][T10944] usb 2-1: Product: syz [ 853.986730][T10944] usb 2-1: Manufacturer: syz [ 853.992748][T10944] usb 2-1: SerialNumber: syz [ 853.998956][T10944] usb 2-1: config 0 descriptor?? [ 854.040847][T10944] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 854.054898][T10944] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 854.069547][ T3694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 854.079018][ T3694] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 854.088194][ T3694] usb 5-1: Product: syz [ 854.093151][ T3694] usb 5-1: Manufacturer: syz [ 854.098192][ T3694] usb 5-1: SerialNumber: syz [ 854.107230][ T3694] usb 5-1: config 0 descriptor?? [ 854.152541][ T3694] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 854.172014][ T3694] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 854.259442][ T3731] usbhid 4-1:0.0: can't add hid device: -71 [ 854.265446][ T3731] usbhid: probe of 4-1:0.0 failed with error -71 [ 854.278118][ T3731] usb 4-1: USB disconnect, device number 47 03:08:46 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000070000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x5, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x7, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 856.156698][ T3694] usb 5-1: USB disconnect, device number 27 [ 856.164996][ T3694] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 856.196456][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 856.240351][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 856.599389][ T3694] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 856.839370][ T3694] usb 5-1: Using ep0 maxpacket: 32 [ 856.959449][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 857.139547][ T3694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 857.148629][ T3694] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 857.157478][ T3694] usb 5-1: Product: syz [ 857.161808][ T3694] usb 5-1: Manufacturer: syz [ 857.166574][ T3694] usb 5-1: SerialNumber: syz [ 857.174572][ T3694] usb 5-1: config 0 descriptor?? [ 857.221239][ T3694] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 857.235340][ T3694] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 859.231404][ T3694] usb 5-1: USB disconnect, device number 28 [ 859.249823][ T3694] ldusb 5-1:0.0: LD USB Device #1 now disconnected 03:08:49 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00c130d1c7000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="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", 0x16b) syz_usb_connect$uac1(0x3, 0x128, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x7, 0x50, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x5, 0x1, 0x6, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x6, 0x3f, 0x0, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x27f, 0x2, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x7, 0x3, 0xf7, 0x3f}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x4, 0x4], 0x4c}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x20, "827596fb90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8e, 0x2, 0x0, 0x0, "", '2P'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x1, "de64a42ebeae31dd"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x80, 0x8, "fabbcf62"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x8, 0xef, "faf8de3265"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x6, 0x14, {0x7, 0x25, 0x1, 0x1, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x81, "01", "9540f9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x5f, 0x8a, '\v.K', '\a)'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x2, "fd3b8fa9e8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x2, 0x5, "6711"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x27, 0x8, "99e9dad29c76"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x20, 0x5, {0x7, 0x25, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x1, 0x81, 0x10, 0x3}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x1b, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x40, 0x6, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "c2cdaa6d7108dcbd2116d0d7a76c3508"}]}, 0x2, [{0x83, &(0x7f0000000440)=@string={0x83, 0x3, "e569a9e625aeeb51ff1a069d37e2a082244a05439d83423b696cf4d941b8ce2af25def70fec322dab5b286097d7d519e1811791cb9fa86ac0ce9d643fbf955a202b2e31f4bdd60e6796c94c1b1439c3ed242821eb6a842fb91f7b684cdfd9577f4895a94dae1db5c461b0aa3e7b2dd7b096321e494d6ec4adc0876b338f86658ed"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100c}}]}) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:08:49 executing program 3: dup(0xffffffffffffffff) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "c2fe9bc8"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:08:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000080000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x8, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:49 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 859.309398][T12518] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 859.349128][ T3669] usb 2-1: USB disconnect, device number 99 03:08:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000090000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 859.361991][T12565] __nla_validate_parse: 2 callbacks suppressed [ 859.362012][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 859.396973][ T3669] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:08:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000a0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000b0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 859.438005][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 859.447928][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 859.475545][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x7, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x9, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000f0000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 859.585484][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 859.596952][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 859.608669][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 859.635503][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 859.645256][ T3731] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 859.719687][ T3694] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 859.799483][ T3669] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 859.959426][ T3694] usb 5-1: Using ep0 maxpacket: 32 [ 860.039535][ T3669] usb 2-1: Using ep0 maxpacket: 32 [ 860.079483][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.080168][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 860.090575][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 860.090612][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.120735][ T3731] usb 4-1: config 0 descriptor?? [ 860.179502][ T3669] usb 2-1: config 48 has too many interfaces: 193, using maximum allowed: 32 [ 860.189748][ T3669] usb 2-1: config 48 has 1 interface, different from the descriptor's value: 193 [ 860.199013][ T3669] usb 2-1: config 48 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 860.269630][ T3694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 860.278982][ T3694] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 860.293495][ T3694] usb 5-1: Product: syz [ 860.297670][ T3694] usb 5-1: Manufacturer: syz [ 860.303927][ T3694] usb 5-1: SerialNumber: syz [ 860.315219][ T3694] usb 5-1: config 0 descriptor?? [ 860.361879][ T3694] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 860.371625][ T3669] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 860.383293][ T3694] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 860.391617][ T3669] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 860.401755][ T3669] usb 2-1: Product: syz [ 860.406014][ T3669] usb 2-1: Manufacturer: syz [ 860.412009][ T3669] usb 2-1: SerialNumber: syz [ 860.630353][ T3731] keytouch 0003:0926:3333.005F: fixing up Keytouch IEC report descriptor [ 860.642740][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.005F/input/input121 [ 860.662000][T12572] ldusb 5-1:0.0: Write buffer overflow, 43 bytes dropped [ 860.700719][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.710000][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.728431][ T3731] keytouch 0003:0926:3333.005F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 860.821116][ T3669] ldusb 2-1:48.0: Interrupt out endpoint not found (using control endpoint instead) [ 860.834094][ T3669] ldusb 2-1:48.0: LD USB Device #1 now attached to major 180 minor 1 [ 860.865019][ T3669] usb 2-1: USB disconnect, device number 100 [ 860.883052][ T3669] ldusb 2-1:48.0: LD USB Device #1 now disconnected [ 861.041581][ T4840] usb 4-1: USB disconnect, device number 48 [ 862.365601][ T3731] usb 5-1: USB disconnect, device number 29 [ 862.371688][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) 03:08:52 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00c130d1c7000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="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", 0x16b) syz_usb_connect$uac1(0x3, 0x128, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x7, 0x50, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x5, 0x1, 0x6, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x6, 0x3f, 0x0, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x27f, 0x2, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x7, 0x3, 0xf7, 0x3f}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x4, 0x4], 0x4c}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x20, "827596fb90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8e, 0x2, 0x0, 0x0, "", '2P'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x1, "de64a42ebeae31dd"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x80, 0x8, "fabbcf62"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x8, 0xef, "faf8de3265"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x6, 0x14, {0x7, 0x25, 0x1, 0x1, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x81, "01", "9540f9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x5f, 0x8a, '\v.K', '\a)'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x2, "fd3b8fa9e8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x2, 0x5, "6711"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x27, 0x8, "99e9dad29c76"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x20, 0x5, {0x7, 0x25, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x1, 0x81, 0x10, 0x3}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x1b, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x40, 0x6, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "c2cdaa6d7108dcbd2116d0d7a76c3508"}]}, 0x2, [{0x83, &(0x7f0000000440)=@string={0x83, 0x3, "e569a9e625aeeb51ff1a069d37e2a082244a05439d83423b696cf4d941b8ce2af25def70fec322dab5b286097d7d519e1811791cb9fa86ac0ce9d643fbf955a202b2e31f4bdd60e6796c94c1b1439c3ed242821eb6a842fb91f7b684cdfd9577f4895a94dae1db5c461b0aa3e7b2dd7b096321e494d6ec4adc0876b338f86658ed"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100c}}]}) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00c130d1c7000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000180)="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", 0x16b) (async) syz_usb_connect$uac1(0x3, 0x128, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x7, 0x50, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x5, 0x1, 0x6, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x6, 0x3f, 0x0, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x27f, 0x2, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x7, 0x3, 0xf7, 0x3f}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x4, 0x4], 0x4c}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x20, "827596fb90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8e, 0x2, 0x0, 0x0, "", '2P'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x1, "de64a42ebeae31dd"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x80, 0x8, "fabbcf62"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x8, 0xef, "faf8de3265"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x6, 0x14, {0x7, 0x25, 0x1, 0x1, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x81, "01", "9540f9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x5f, 0x8a, '\v.K', '\a)'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x2, "fd3b8fa9e8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x2, 0x5, "6711"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x27, 0x8, "99e9dad29c76"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x20, 0x5, {0x7, 0x25, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x1, 0x81, 0x10, 0x3}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x1b, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x40, 0x6, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "c2cdaa6d7108dcbd2116d0d7a76c3508"}]}, 0x2, [{0x83, &(0x7f0000000440)=@string={0x83, 0x3, "e569a9e625aeeb51ff1a069d37e2a082244a05439d83423b696cf4d941b8ce2af25def70fec322dab5b286097d7d519e1811791cb9fa86ac0ce9d643fbf955a202b2e31f4bdd60e6796c94c1b1439c3ed242821eb6a842fb91f7b684cdfd9577f4895a94dae1db5c461b0aa3e7b2dd7b096321e494d6ec4adc0876b338f86658ed"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100c}}]}) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) 03:08:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xa, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000100000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x8, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x7, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:08:52 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 862.413412][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:08:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000110000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 862.466039][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 862.494348][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f00000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xb, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x9, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000300000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000500000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 862.749573][ T4840] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 862.779609][ T4833] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 862.829407][ T3731] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 863.019408][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 863.079489][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 863.109476][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.121088][ T4840] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 863.130596][ T4840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.142367][ T4833] usb 2-1: config 48 has too many interfaces: 193, using maximum allowed: 32 [ 863.152891][ T4840] usb 4-1: config 0 descriptor?? [ 863.157965][ T4833] usb 2-1: config 48 has 1 interface, different from the descriptor's value: 193 [ 863.167639][ T4833] usb 2-1: config 48 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 863.199535][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 863.329474][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 863.338939][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 863.352212][ T4833] usb 2-1: Product: syz [ 863.356390][ T4833] usb 2-1: Manufacturer: syz [ 863.361419][ T4833] usb 2-1: SerialNumber: syz [ 863.369920][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 863.379090][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 863.388498][ T3731] usb 5-1: Product: syz [ 863.394368][ T3731] usb 5-1: Manufacturer: syz [ 863.398997][ T3731] usb 5-1: SerialNumber: syz [ 863.407809][ T3731] usb 5-1: config 0 descriptor?? [ 863.450954][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 863.467706][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 863.608835][T12605] ldusb 5-1:0.0: Write buffer overflow, 43 bytes dropped [ 863.617627][ T4840] keytouch 0003:0926:3333.0060: fixing up Keytouch IEC report descriptor [ 863.627884][ T4840] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0060/input/input122 [ 863.660375][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.668931][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.715559][ T4840] keytouch 0003:0926:3333.0060: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 863.761100][ T4833] ldusb 2-1:48.0: Interrupt out endpoint not found (using control endpoint instead) [ 863.779854][ T4833] ldusb 2-1:48.0: LD USB Device #1 now attached to major 180 minor 1 [ 863.808303][ T4833] usb 2-1: USB disconnect, device number 101 [ 863.849010][ T4833] ldusb 2-1:48.0: LD USB Device #1 now disconnected [ 863.875993][ T3669] usb 4-1: USB disconnect, device number 49 03:08:54 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00c130d1c7000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="1cc70a218f2f32239a09ac642548df0faae9c7f5172588a28f30895c966dd900a6dd54e7ff7b7db7742d2d46dfe7ece9ef2a37e8fd9cff48a2ca87b9f393375a0286f84ca342234a25f7f9a669cc40c9e92152cd951e0d93950aac85bd6f3626f1451f092c95322b33cc9b18d2e26772977242a74fc693e72bc7d90c66d7943f13b611de5ddabe0eb412015dfb3ec97304cfd5e1030441c4c14e0d0b9fba0cdcf0c1816e29cf9e8c4466381a06fee956f15e873ea7270ec2a91995355fd9692c378e2965f8ac0cc09f2f531c077c91bd260d6e0e811eff4167a529bd088743e1eefb554eba90a662d5e71e0337c833040ab927b94010539570e7d6cc9b1d3a956dec1bf6a6f66c312e5856e0db5d1e48d2d624a73940a0a506f3c88dd18338eabe8670e410fa46592fa79f5be0e739905ba0be1ef366b14e4c5fb5b8e96fbd1a5f5641216f9153d1b752eb2b12319aa2d1a0c76f66bdb922112f11935bfd0d4e6a9a81f40c3c03c51ff7e6", 0x16b) syz_usb_connect$uac1(0x3, 0x128, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x7, 0x50, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x5, 0x1, 0x6, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x6, 0x3f, 0x0, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x27f, 0x2, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x7, 0x3, 0xf7, 0x3f}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x4, 0x4], 0x4c}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x20, "827596fb90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8e, 0x2, 0x0, 0x0, "", '2P'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x1, "de64a42ebeae31dd"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x80, 0x8, "fabbcf62"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x8, 0xef, "faf8de3265"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x6, 0x14, {0x7, 0x25, 0x1, 0x1, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x81, "01", "9540f9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x5f, 0x8a, '\v.K', '\a)'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x2, "fd3b8fa9e8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x2, 0x5, "6711"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x27, 0x8, "99e9dad29c76"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x20, 0x5, {0x7, 0x25, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x1, 0x81, 0x10, 0x3}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x1b, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x40, 0x6, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "c2cdaa6d7108dcbd2116d0d7a76c3508"}]}, 0x2, [{0x83, &(0x7f0000000440)=@string={0x83, 0x3, "e569a9e625aeeb51ff1a069d37e2a082244a05439d83423b696cf4d941b8ce2af25def70fec322dab5b286097d7d519e1811791cb9fa86ac0ce9d643fbf955a202b2e31f4bdd60e6796c94c1b1439c3ed242821eb6a842fb91f7b684cdfd9577f4895a94dae1db5c461b0aa3e7b2dd7b096321e494d6ec4adc0876b338f86658ed"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100c}}]}) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00c130d1c7000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000180)="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", 0x16b) (async) syz_usb_connect$uac1(0x3, 0x128, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x7, 0x50, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x5, 0x1, 0x6, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x6, 0x3f, 0x0, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x27f, 0x2, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x7, 0x3, 0xf7, 0x3f}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x4, 0x4], 0x4c}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x20, "827596fb90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8e, 0x2, 0x0, 0x0, "", '2P'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x1, "de64a42ebeae31dd"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x80, 0x8, "fabbcf62"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x8, 0xef, "faf8de3265"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x6, 0x14, {0x7, 0x25, 0x1, 0x1, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x81, "01", "9540f9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x5f, 0x8a, '\v.K', '\a)'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x2, "fd3b8fa9e8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x2, 0x5, "6711"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x27, 0x8, "99e9dad29c76"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x20, 0x5, {0x7, 0x25, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x1, 0x81, 0x10, 0x3}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x1b, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x40, 0x6, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "c2cdaa6d7108dcbd2116d0d7a76c3508"}]}, 0x2, [{0x83, &(0x7f0000000440)=@string={0x83, 0x3, "e569a9e625aeeb51ff1a069d37e2a082244a05439d83423b696cf4d941b8ce2af25def70fec322dab5b286097d7d519e1811791cb9fa86ac0ce9d643fbf955a202b2e31f4bdd60e6796c94c1b1439c3ed242821eb6a842fb91f7b684cdfd9577f4895a94dae1db5c461b0aa3e7b2dd7b096321e494d6ec4adc0876b338f86658ed"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100c}}]}) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) 03:08:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xc, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xa, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000600000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 863.938610][ T3731] usb 5-1: USB disconnect, device number 30 [ 863.944758][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 863.984825][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:08:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x7, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x7, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:08:54 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b033d721a282efea63eeb43736b50827b8a00026b7c90ee57c89931b92e276a386523481d1d22bc5e8cdb459b3af20d781c141ea5454efcd673da75f83166995cbf14a6ba7e58e5e6e792e48e6d1dc45f0cb855651090317"}}, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xe, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 864.399418][ T4833] usb 2-1: new high-speed USB device number 102 using dummy_hcd 03:08:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000900000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 864.474819][T12640] __nla_validate_parse: 10 callbacks suppressed [ 864.474840][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 864.494401][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 864.512475][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000a00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 864.548762][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 864.636564][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 864.646986][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 864.672785][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 864.699614][ T3694] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 864.769534][ T4833] usb 2-1: config 48 has too many interfaces: 193, using maximum allowed: 32 [ 864.778390][ T4833] usb 2-1: config 48 has 1 interface, different from the descriptor's value: 193 [ 864.787958][ T4833] usb 2-1: config 48 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 864.799450][ T3731] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 864.979875][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 864.988964][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 864.997899][ T4833] usb 2-1: Product: syz [ 865.002641][ T4833] usb 2-1: Manufacturer: syz [ 865.007256][ T4833] usb 2-1: SerialNumber: syz [ 865.039677][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 865.079627][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.090703][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 865.100134][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.118442][ T3694] usb 4-1: config 0 descriptor?? [ 865.179469][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 865.250874][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.259569][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.291589][ T4833] ldusb 2-1:48.0: Interrupt out endpoint not found (using control endpoint instead) [ 865.303021][ T4833] ldusb 2-1:48.0: LD USB Device #0 now attached to major 180 minor 0 [ 865.313425][ T4833] usb 2-1: USB disconnect, device number 102 [ 865.321581][ T4833] ldusb 2-1:48.0: LD USB Device #0 now disconnected [ 865.391973][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 865.401225][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 865.410161][ T3731] usb 5-1: Product: syz [ 865.414352][ T3731] usb 5-1: Manufacturer: syz [ 865.418973][ T3731] usb 5-1: SerialNumber: syz [ 865.426441][ T3731] usb 5-1: config 0 descriptor?? 03:08:55 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x24, 0x54, {0x54, 0x21, "c2a7108f06182677d38bc7389e60d79a9ad152006e435e9235e6c22049e21ebd4ce9d26950630f8bcf67ded556f0b5b8b2c1290d48dedb65eeb5b7ad7fa50a0c3b1d91cf75f51b6549ce2f468e29a4b94abd"}}, &(0x7f0000000200)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "a35f178dd312c187b23b9885383181fdc17b48f4fb14dbed656c4223eaa7966be63bfa2c93f6f3ded0dc60ae2f1c090515fb0c08c336da3c3be6291025387ec0e2ecf2779f48d4171dfa7d36506d54e524da892d84ddde423f6c0a1a3494c6f1ad539f0d37426cf27ced7ef8f929400cc2198efd519788f9a8d0e33cc9e914b0b9c4046e78fade5fe15aac93a7a4d79f7576f14eb8c44a5839701b0055e93486db83b1487eeed5457f80372fb87bcabb41833218513b0608f3827463a2355513a7dab54ccf8b1c4375fad631a5a7ea87edc598ea0883ab1b4dfa8b46cdc529d88256bf0c5ea6f7ba3337a377de5dc8c6"}}, &(0x7f0000000300)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x60, 0x80, 0x5, 0xf0, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f857c3092f95613867629256baaf5e04"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x1, 0x20}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9b, 0x2, 0x401, 0xf00f, 0x1f, [0xf0, 0xff0000]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x9, 0x1f, "827e2105", "06e640f7"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x2, 0x7d, 0x1, 0x9, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x20, 0xa, 0x72, "ccaba96280d529d6403ceb2df8d3208246e610d140e7d7bf35b4e5dfb1964f0f73512e0c31eb53fb888a10550a785f78311a9366bba3806bbe69f80094bc3dfcbc0d477794a37cc7bfa2df858617f11a24bb64028d396ae7932f2555aafb7302cea4c2a92b43b8a4dd4ecefbbba88ae6a5b5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x80, [0xf0]}}, &(0x7f00000011c0)={0x40, 0x7, 0x2, 0x209}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, '\b+'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'gB'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) r3 = syz_usb_connect$uac1(0x4, 0xdc, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x3, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x8c, "a8717cac"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4, 'K'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1f, 0x81, {0x7, 0x25, 0x1, 0x1, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x101, 0x6, 0x1f, "248b1f8180bb0643"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x7, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x3f, 0x4, "86e4457381f532"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x6, 0xff, "9f628f2d9a3c9c61"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x1f, "88e61986d1b1ad"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x8, 0x5, "d297a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x2, 0xf4, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x57, 0x0, 0xcc, 0x40, 0x81}, 0x2d, &(0x7f0000000a80)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x40, 0xc0}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x5, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "6c78afc4fe4aeb12c92204ada84cdbaa"}]}, 0x4, [{0x30, &(0x7f0000000ac0)=@string={0x30, 0x3, "20fff0e2847077cf2173775f67074b4e10268742d3d16a15b0a50a7d370a780e53aa8c7c45fa190c0ee93220126a"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x412}}, {0xa5, &(0x7f0000000b80)=@string={0xa5, 0x3, "dbc80245540e6800e8efa4ffee14a2b163be3d3add619a782b8b049d654ce022d7c3ad39b71e10469dbe1148391b8a32fd629d8e6e01dd01dd79f7a70f419412c72cf2a3e4c4fc639276caedc94cfd37ac3f7c07ae5909d7d2fe05d8676d0a81b4f28c11fb3342330606fe9d5e2a5d4fd47b629e2b49552bfeaba78f0bd7f6b2ee56bb0dc7887cf8316c98ec5adf1832e111d3a99b197a0c0fb0100f9e0a00df7c6302"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000e40)={0x14, &(0x7f0000001200)={0x20, 0x6, 0x71, {0x71, 0xf, "4294fd277a4e5c374ae6e3f72b0f0f72b032201ad679054f036773b866672389e89f0d856776627e8c0dc9a24f377807a7919d9a732c0c384c3e5101c5dbeae2bf2bc21d251657720d339a26b3745c5647ba07df67442b19f426f9b2c00d76c74a40b683f3faa0d22838a7818bac13"}}, &(0x7f0000000d40)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "7dce8b1963b269ed77253d66525baca88468e7f12aa5b2bb1c592c6dd4327271e7738e22658f4f8cbd78c65b6cab16e96428774c862ce7b5f70275efb4549190b73659abff15f6437753697a40d7f0dc3cfde7dd75861aefc80b38533c1cffcff3f9e70821dcab75c439ec72236b463b967b0be65338b7f57321a11776c31d209b135b33663520e7b769d210ef507557bcc0d5e866a65e25f48ca63d82b0f9a10e13a9a7392e051601178aebfebccc323b2fd39f41994f89c667bed241a1a2b750eeec916641bc2bfd938c91bd5bd06604e07c88affc0c709d32539aa6be76ae30ee395c"}}}, &(0x7f0000001140)={0x44, &(0x7f0000000e80)={0x0, 0xf, 0xee, "49c89b91c4486d2a1f757d129951dd0b36cd723d3ee94c8b08e41e637e08f67efa1485326fc152209838a7c8f0742b5ccf497306e4a3b230eef1b7e6a98d4fe91d1f4645916b188e02cdd5c36c93058d64178cef388fa6f232e0d6892d7f1c94559ba68c22edbaf1b00a878a8775afed84360267a7837c8c577a3a303efa78c79a08289c33a4d768681db16f87febc06844557e38be5f6717bd0fb214d961b26737ac93de8e91374c864065323577b56591f0045b67bd98793b8f093aeafa4499d1e819eec1d5cd10fdf1367f7ed39cb2889b2b8747b615c7003d84c4eb153c75f8cf69145be1f2e2d946a2ec64f"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x81, 0x3, "f0fc8c"}, &(0x7f0000001040)={0x20, 0x82, 0x3, "adab85"}, &(0x7f0000001080)={0x20, 0x83, 0x1, 'L'}, &(0x7f00000010c0)={0x20, 0x84, 0x2, "99cc"}, &(0x7f0000001100)={0x20, 0x85, 0x3, "d44ea8"}}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002c80), 0x0, 0x0) connect$unix(r4, &(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 03:08:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xc, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000b00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x10, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 865.475359][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 865.496429][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 865.550811][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 865.577643][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 865.587635][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 865.600980][ T3694] keytouch 0003:0926:3333.0061: fixing up Keytouch IEC report descriptor [ 865.618233][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0061/input/input123 [ 865.630507][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 865.704766][ T3694] keytouch 0003:0926:3333.0061: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 03:08:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000f00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 865.824975][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.835107][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.853790][ T3694] usb 4-1: USB disconnect, device number 50 [ 865.969459][ T4833] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 866.249397][ T4833] usb 2-1: Using ep0 maxpacket: 32 [ 866.276033][T10944] usb 5-1: USB disconnect, device number 31 [ 866.292276][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 866.379643][ T4833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 866.549568][ T4833] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 866.558678][ T4833] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 866.567220][ T4833] usb 2-1: Product: syz [ 866.571904][ T4833] usb 2-1: Manufacturer: syz [ 866.576526][ T4833] usb 2-1: SerialNumber: syz [ 866.585638][ T4833] usb 2-1: config 0 descriptor?? [ 866.640749][ T4833] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 866.652342][ T4833] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:08:57 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:08:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x7, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:08:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xe, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:08:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x11, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001100000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000003f00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x60, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 867.099359][ T3694] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 867.149504][T10944] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 867.399461][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 867.459449][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.470420][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 867.480002][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.490395][ T3694] usb 4-1: config 0 descriptor?? [ 867.519521][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 867.689660][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 867.698763][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 867.707472][T10944] usb 5-1: Product: syz [ 867.711992][T10944] usb 5-1: Manufacturer: syz [ 867.716622][T10944] usb 5-1: SerialNumber: syz [ 867.731436][T10944] usb 5-1: config 0 descriptor?? [ 867.772919][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 867.783474][T10944] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 867.971031][ T3694] keytouch 0003:0926:3333.0062: fixing up Keytouch IEC report descriptor [ 867.985586][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0062/input/input124 [ 868.069353][ T3694] keytouch 0003:0926:3333.0062: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 868.176903][ T3731] usb 4-1: USB disconnect, device number 51 03:08:58 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x24, 0x54, {0x54, 0x21, "c2a7108f06182677d38bc7389e60d79a9ad152006e435e9235e6c22049e21ebd4ce9d26950630f8bcf67ded556f0b5b8b2c1290d48dedb65eeb5b7ad7fa50a0c3b1d91cf75f51b6549ce2f468e29a4b94abd"}}, &(0x7f0000000200)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "a35f178dd312c187b23b9885383181fdc17b48f4fb14dbed656c4223eaa7966be63bfa2c93f6f3ded0dc60ae2f1c090515fb0c08c336da3c3be6291025387ec0e2ecf2779f48d4171dfa7d36506d54e524da892d84ddde423f6c0a1a3494c6f1ad539f0d37426cf27ced7ef8f929400cc2198efd519788f9a8d0e33cc9e914b0b9c4046e78fade5fe15aac93a7a4d79f7576f14eb8c44a5839701b0055e93486db83b1487eeed5457f80372fb87bcabb41833218513b0608f3827463a2355513a7dab54ccf8b1c4375fad631a5a7ea87edc598ea0883ab1b4dfa8b46cdc529d88256bf0c5ea6f7ba3337a377de5dc8c6"}}, &(0x7f0000000300)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x60, 0x80, 0x5, 0xf0, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f857c3092f95613867629256baaf5e04"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x1, 0x20}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9b, 0x2, 0x401, 0xf00f, 0x1f, [0xf0, 0xff0000]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x9, 0x1f, "827e2105", "06e640f7"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x2, 0x7d, 0x1, 0x9, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x20, 0xa, 0x72, "ccaba96280d529d6403ceb2df8d3208246e610d140e7d7bf35b4e5dfb1964f0f73512e0c31eb53fb888a10550a785f78311a9366bba3806bbe69f80094bc3dfcbc0d477794a37cc7bfa2df858617f11a24bb64028d396ae7932f2555aafb7302cea4c2a92b43b8a4dd4ecefbbba88ae6a5b5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x80, [0xf0]}}, &(0x7f00000011c0)={0x40, 0x7, 0x2, 0x209}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, '\b+'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'gB'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) (async) r3 = syz_usb_connect$uac1(0x4, 0xdc, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x3, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x8c, "a8717cac"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4, 'K'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1f, 0x81, {0x7, 0x25, 0x1, 0x1, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x101, 0x6, 0x1f, "248b1f8180bb0643"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x7, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x3f, 0x4, "86e4457381f532"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x6, 0xff, "9f628f2d9a3c9c61"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x1f, "88e61986d1b1ad"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x8, 0x5, "d297a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x2, 0xf4, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x57, 0x0, 0xcc, 0x40, 0x81}, 0x2d, &(0x7f0000000a80)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x40, 0xc0}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x5, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "6c78afc4fe4aeb12c92204ada84cdbaa"}]}, 0x4, [{0x30, &(0x7f0000000ac0)=@string={0x30, 0x3, "20fff0e2847077cf2173775f67074b4e10268742d3d16a15b0a50a7d370a780e53aa8c7c45fa190c0ee93220126a"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x412}}, {0xa5, &(0x7f0000000b80)=@string={0xa5, 0x3, "dbc80245540e6800e8efa4ffee14a2b163be3d3add619a782b8b049d654ce022d7c3ad39b71e10469dbe1148391b8a32fd629d8e6e01dd01dd79f7a70f419412c72cf2a3e4c4fc639276caedc94cfd37ac3f7c07ae5909d7d2fe05d8676d0a81b4f28c11fb3342330606fe9d5e2a5d4fd47b629e2b49552bfeaba78f0bd7f6b2ee56bb0dc7887cf8316c98ec5adf1832e111d3a99b197a0c0fb0100f9e0a00df7c6302"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000e40)={0x14, &(0x7f0000001200)={0x20, 0x6, 0x71, {0x71, 0xf, "4294fd277a4e5c374ae6e3f72b0f0f72b032201ad679054f036773b866672389e89f0d856776627e8c0dc9a24f377807a7919d9a732c0c384c3e5101c5dbeae2bf2bc21d251657720d339a26b3745c5647ba07df67442b19f426f9b2c00d76c74a40b683f3faa0d22838a7818bac13"}}, &(0x7f0000000d40)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "7dce8b1963b269ed77253d66525baca88468e7f12aa5b2bb1c592c6dd4327271e7738e22658f4f8cbd78c65b6cab16e96428774c862ce7b5f70275efb4549190b73659abff15f6437753697a40d7f0dc3cfde7dd75861aefc80b38533c1cffcff3f9e70821dcab75c439ec72236b463b967b0be65338b7f57321a11776c31d209b135b33663520e7b769d210ef507557bcc0d5e866a65e25f48ca63d82b0f9a10e13a9a7392e051601178aebfebccc323b2fd39f41994f89c667bed241a1a2b750eeec916641bc2bfd938c91bd5bd06604e07c88affc0c709d32539aa6be76ae30ee395c"}}}, &(0x7f0000001140)={0x44, &(0x7f0000000e80)={0x0, 0xf, 0xee, "49c89b91c4486d2a1f757d129951dd0b36cd723d3ee94c8b08e41e637e08f67efa1485326fc152209838a7c8f0742b5ccf497306e4a3b230eef1b7e6a98d4fe91d1f4645916b188e02cdd5c36c93058d64178cef388fa6f232e0d6892d7f1c94559ba68c22edbaf1b00a878a8775afed84360267a7837c8c577a3a303efa78c79a08289c33a4d768681db16f87febc06844557e38be5f6717bd0fb214d961b26737ac93de8e91374c864065323577b56591f0045b67bd98793b8f093aeafa4499d1e819eec1d5cd10fdf1367f7ed39cb2889b2b8747b615c7003d84c4eb153c75f8cf69145be1f2e2d946a2ec64f"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x81, 0x3, "f0fc8c"}, &(0x7f0000001040)={0x20, 0x82, 0x3, "adab85"}, &(0x7f0000001080)={0x20, 0x83, 0x1, 'L'}, &(0x7f00000010c0)={0x20, 0x84, 0x2, "99cc"}, &(0x7f0000001100)={0x20, 0x85, 0x3, "d44ea8"}}) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002c80), 0x0, 0x0) connect$unix(r4, &(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 03:08:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000f000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:08:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:08:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 868.571526][ T3731] usb 2-1: USB disconnect, device number 103 [ 868.586259][ T3731] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:08:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000003000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 869.029448][ T3731] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 869.279330][ T3731] usb 2-1: Using ep0 maxpacket: 32 [ 869.399689][ T3731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 869.569568][ T3731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 869.578620][ T3731] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 869.587127][ T3731] usb 2-1: Product: syz [ 869.591358][ T3731] usb 2-1: Manufacturer: syz [ 869.595975][ T3731] usb 2-1: SerialNumber: syz [ 869.603979][ T3731] usb 2-1: config 0 descriptor?? [ 869.642018][ T3731] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 869.656415][ T3731] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 869.770601][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.776964][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 03:09:00 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x1, [@generic={0xf1, 0x10, 0x1, "0d42d224b8afe6c77f7b1772117c31109be04f5ac1e9da5f834dd55a3d71f2d455b43dd72c427b70ff88b145c2742d42f0a51662623e8d8a81319d99fa76cd9aea4e90de6d3de1d224eab8e31e7ec3d603a48661f8a60cea59a236c64c9be249d35ffa29dffdedd0db7b5f85641d4c2f18f47fc46811a2cbe9ee1b914fef79270a8a939099f03edda121d4b6e77bef7bece8c2c41613264f4b7a10a49791c05a3d551a64cd0f3f5032f41f902d149b842f173c5674827444a55990dd554f012b9cd24d9ada070088e8b80b91c4b4368e17483323b1f69907d1c6c9f85c3e820b33fe0026ce5e31d3cbf3b5a5e184"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:00 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x30d, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100402609333340000000000109022400010000000009040000010301000009210000000122010009058154ab"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x300, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x10, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000004003000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 869.882078][ T3694] usb 5-1: USB disconnect, device number 32 [ 869.891075][ T3694] ldusb 5-1:0.0: LD USB Device #1 now disconnected 03:09:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000340000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:00 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x24, 0x54, {0x54, 0x21, "c2a7108f06182677d38bc7389e60d79a9ad152006e435e9235e6c22049e21ebd4ce9d26950630f8bcf67ded556f0b5b8b2c1290d48dedb65eeb5b7ad7fa50a0c3b1d91cf75f51b6549ce2f468e29a4b94abd"}}, &(0x7f0000000200)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "a35f178dd312c187b23b9885383181fdc17b48f4fb14dbed656c4223eaa7966be63bfa2c93f6f3ded0dc60ae2f1c090515fb0c08c336da3c3be6291025387ec0e2ecf2779f48d4171dfa7d36506d54e524da892d84ddde423f6c0a1a3494c6f1ad539f0d37426cf27ced7ef8f929400cc2198efd519788f9a8d0e33cc9e914b0b9c4046e78fade5fe15aac93a7a4d79f7576f14eb8c44a5839701b0055e93486db83b1487eeed5457f80372fb87bcabb41833218513b0608f3827463a2355513a7dab54ccf8b1c4375fad631a5a7ea87edc598ea0883ab1b4dfa8b46cdc529d88256bf0c5ea6f7ba3337a377de5dc8c6"}}, &(0x7f0000000300)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x60, 0x80, 0x5, 0xf0, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f857c3092f95613867629256baaf5e04"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x1, 0x20}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9b, 0x2, 0x401, 0xf00f, 0x1f, [0xf0, 0xff0000]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x9, 0x1f, "827e2105", "06e640f7"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x2, 0x7d, 0x1, 0x9, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x20, 0xa, 0x72, "ccaba96280d529d6403ceb2df8d3208246e610d140e7d7bf35b4e5dfb1964f0f73512e0c31eb53fb888a10550a785f78311a9366bba3806bbe69f80094bc3dfcbc0d477794a37cc7bfa2df858617f11a24bb64028d396ae7932f2555aafb7302cea4c2a92b43b8a4dd4ecefbbba88ae6a5b5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x80, [0xf0]}}, &(0x7f00000011c0)={0x40, 0x7, 0x2, 0x209}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, '\b+'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'gB'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) (async) r3 = syz_usb_connect$uac1(0x4, 0xdc, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x3, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x8c, "a8717cac"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4, 'K'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1f, 0x81, {0x7, 0x25, 0x1, 0x1, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x101, 0x6, 0x1f, "248b1f8180bb0643"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x7, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x3f, 0x4, "86e4457381f532"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x6, 0xff, "9f628f2d9a3c9c61"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x1f, "88e61986d1b1ad"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x8, 0x5, "d297a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x2, 0xf4, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x57, 0x0, 0xcc, 0x40, 0x81}, 0x2d, &(0x7f0000000a80)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x40, 0xc0}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x5, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "6c78afc4fe4aeb12c92204ada84cdbaa"}]}, 0x4, [{0x30, &(0x7f0000000ac0)=@string={0x30, 0x3, "20fff0e2847077cf2173775f67074b4e10268742d3d16a15b0a50a7d370a780e53aa8c7c45fa190c0ee93220126a"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x412}}, {0xa5, &(0x7f0000000b80)=@string={0xa5, 0x3, "dbc80245540e6800e8efa4ffee14a2b163be3d3add619a782b8b049d654ce022d7c3ad39b71e10469dbe1148391b8a32fd629d8e6e01dd01dd79f7a70f419412c72cf2a3e4c4fc639276caedc94cfd37ac3f7c07ae5909d7d2fe05d8676d0a81b4f28c11fb3342330606fe9d5e2a5d4fd47b629e2b49552bfeaba78f0bd7f6b2ee56bb0dc7887cf8316c98ec5adf1832e111d3a99b197a0c0fb0100f9e0a00df7c6302"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000e40)={0x14, &(0x7f0000001200)={0x20, 0x6, 0x71, {0x71, 0xf, "4294fd277a4e5c374ae6e3f72b0f0f72b032201ad679054f036773b866672389e89f0d856776627e8c0dc9a24f377807a7919d9a732c0c384c3e5101c5dbeae2bf2bc21d251657720d339a26b3745c5647ba07df67442b19f426f9b2c00d76c74a40b683f3faa0d22838a7818bac13"}}, &(0x7f0000000d40)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "7dce8b1963b269ed77253d66525baca88468e7f12aa5b2bb1c592c6dd4327271e7738e22658f4f8cbd78c65b6cab16e96428774c862ce7b5f70275efb4549190b73659abff15f6437753697a40d7f0dc3cfde7dd75861aefc80b38533c1cffcff3f9e70821dcab75c439ec72236b463b967b0be65338b7f57321a11776c31d209b135b33663520e7b769d210ef507557bcc0d5e866a65e25f48ca63d82b0f9a10e13a9a7392e051601178aebfebccc323b2fd39f41994f89c667bed241a1a2b750eeec916641bc2bfd938c91bd5bd06604e07c88affc0c709d32539aa6be76ae30ee395c"}}}, &(0x7f0000001140)={0x44, &(0x7f0000000e80)={0x0, 0xf, 0xee, "49c89b91c4486d2a1f757d129951dd0b36cd723d3ee94c8b08e41e637e08f67efa1485326fc152209838a7c8f0742b5ccf497306e4a3b230eef1b7e6a98d4fe91d1f4645916b188e02cdd5c36c93058d64178cef388fa6f232e0d6892d7f1c94559ba68c22edbaf1b00a878a8775afed84360267a7837c8c577a3a303efa78c79a08289c33a4d768681db16f87febc06844557e38be5f6717bd0fb214d961b26737ac93de8e91374c864065323577b56591f0045b67bd98793b8f093aeafa4499d1e819eec1d5cd10fdf1367f7ed39cb2889b2b8747b615c7003d84c4eb153c75f8cf69145be1f2e2d946a2ec64f"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001000)={0x20, 0x81, 0x3, "f0fc8c"}, &(0x7f0000001040)={0x20, 0x82, 0x3, "adab85"}, &(0x7f0000001080)={0x20, 0x83, 0x1, 'L'}, &(0x7f00000010c0)={0x20, 0x84, 0x2, "99cc"}, &(0x7f0000001100)={0x20, 0x85, 0x3, "d44ea8"}}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002c80), 0x0, 0x0) (async) connect$unix(r4, &(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 869.923375][T12708] __nla_validate_parse: 10 callbacks suppressed [ 869.923395][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 869.953555][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fffff0000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 869.979108][ T4840] usb 2-1: USB disconnect, device number 104 [ 870.000654][ T4840] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:09:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000010100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 870.020493][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002c80), 0x0, 0x0) r2 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r2) [ 870.103153][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000020100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x32a, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 870.230379][ T5338] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 870.241587][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 870.252240][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 870.389473][ T3694] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 870.640959][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 171, setting to 64 [ 870.651922][ T3694] usb 5-1: Using ep0 maxpacket: 32 [ 870.657128][ T5338] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 870.666777][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.676896][ T5338] usb 4-1: config 0 descriptor?? [ 870.736550][ T5338] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 870.779562][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 870.961426][ T3694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 870.970564][ T3694] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 870.978988][ T3694] usb 5-1: Product: syz [ 870.983762][ T3694] usb 5-1: Manufacturer: syz [ 870.988376][ T3694] usb 5-1: SerialNumber: syz [ 870.994876][ T3694] usb 5-1: config 0 descriptor?? [ 871.053968][ T3694] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 871.064712][ T3694] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 871.844809][T10944] usb 5-1: USB disconnect, device number 33 [ 871.862242][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:02 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x5, 0x8, "e6a52554", "74f2cae0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 872.669391][T10944] usb 5-1: new high-speed USB device number 34 using dummy_hcd 03:09:03 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x30d, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100402609333340000000000109022400010000000009040000010301000009210000000122010009058154ab"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x30d, 0x5}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100402609333340000000000109022400010000000009040000010301000009210000000122010009058154ab"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r1, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:09:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x11, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x500, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000030100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002c80), 0x0, 0x0) r2 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r2) socket(0x10, 0x3, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmmsg$unix(r1, &(0x7f0000002c80), 0x0, 0x0) (async) syz_usb_connect(0x4, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r2) (async) 03:09:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 872.912548][ T3694] usb 4-1: USB disconnect, device number 52 [ 872.919459][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 872.937149][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 872.998679][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 873.020806][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000050100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x23, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 873.042007][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 873.052008][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 03:09:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x600, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000060100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002c80), 0x0, 0x0) (async) r2 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r2) [ 873.269465][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 873.278634][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 873.288457][T10944] usb 5-1: Product: syz [ 873.293282][T10944] usb 5-1: Manufacturer: syz [ 873.298084][T10944] usb 5-1: SerialNumber: syz [ 873.304591][T10944] usb 5-1: config 0 descriptor?? [ 873.372472][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 873.384619][T10944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 873.452087][ T3694] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 873.829598][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 171, setting to 64 [ 873.840895][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 873.850754][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.870044][ T3694] usb 4-1: config 0 descriptor?? [ 873.914856][ T3694] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 874.162391][ T3694] usb 5-1: USB disconnect, device number 34 [ 874.175853][ T3694] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:04 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:05 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x30d, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000100402609333340000000000109022400010000000009040000010301000009210000000122010009058154ab"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x60, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000070100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x700, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:05 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000005e8e89a194d15cb053fa83051a14c1"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) [ 874.825438][ T3690] usb 4-1: USB disconnect, device number 53 03:09:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000080100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x900, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000090100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 874.999538][ T4833] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 875.020940][T12791] __nla_validate_parse: 8 callbacks suppressed [ 875.020961][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 875.050806][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.090161][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000a0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 875.129434][ T3731] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 875.151632][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xa00, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 875.239670][ T4833] usb 5-1: Using ep0 maxpacket: 32 [ 875.260006][ T3690] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 875.298848][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.316594][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.359985][ T4833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 875.379679][ T3731] usb 2-1: Using ep0 maxpacket: 32 [ 875.499634][ T3731] usb 2-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 875.515844][ T3731] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 875.530187][ T4833] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 875.548638][ T4833] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 875.557663][ T4833] usb 5-1: Product: syz [ 875.570156][ T4833] usb 5-1: Manufacturer: syz [ 875.574802][ T4833] usb 5-1: SerialNumber: syz [ 875.592727][ T4833] usb 5-1: config 0 descriptor?? [ 875.629536][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 171, setting to 64 [ 875.642862][ T4833] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 875.652378][ T3690] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 875.663155][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.671544][ T4833] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 875.691207][ T3690] usb 4-1: config 0 descriptor?? [ 875.699668][ T3731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 875.708790][ T3731] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 875.717787][ T3731] usb 2-1: Product: syz [ 875.722078][ T3731] usb 2-1: Manufacturer: syz [ 875.726709][ T3731] usb 2-1: SerialNumber: syz [ 875.733319][ T3690] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 875.743844][ T3731] usb 2-1: config 0 descriptor?? [ 876.072119][ T3731] usb 2-1: USB disconnect, device number 105 03:09:08 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 877.700701][ T4840] usb 5-1: USB disconnect, device number 35 [ 877.709444][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 877.842497][ T4840] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x168, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000b0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xb00, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:08 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000005e8e89a194d15cb053fa83051a14c1"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) [ 877.891950][ T3694] usb 4-1: USB disconnect, device number 54 03:09:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000f0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 877.940816][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 877.978638][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 878.002149][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000100100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xc00, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 878.044142][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x294, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000110100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000a732c6120100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 878.209968][ T5338] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 878.239478][ T4840] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 878.339372][ T3694] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 878.459381][ T5338] usb 2-1: Using ep0 maxpacket: 32 [ 878.499524][ T4840] usb 5-1: Using ep0 maxpacket: 32 [ 878.579727][ T5338] usb 2-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 878.590167][ T5338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 878.629562][ T4840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 878.699439][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.711331][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 878.720659][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.735397][ T3694] usb 4-1: config 0 descriptor?? [ 878.749515][ T5338] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 878.758620][ T5338] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 878.767577][ T5338] usb 2-1: Product: syz [ 878.771881][ T5338] usb 2-1: Manufacturer: syz [ 878.776505][ T5338] usb 2-1: SerialNumber: syz [ 878.789117][ T5338] usb 2-1: config 0 descriptor?? [ 878.819622][ T4840] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 878.828870][ T4840] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 878.838047][ T4840] usb 5-1: Product: syz [ 878.850198][ T4840] usb 5-1: Manufacturer: syz [ 878.855070][ T4840] usb 5-1: SerialNumber: syz [ 878.862884][ T4840] usb 5-1: config 0 descriptor?? [ 878.902237][ T4840] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 878.914566][ T4840] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 879.037576][T10944] usb 2-1: USB disconnect, device number 106 [ 879.221650][ T3694] keytouch 0003:0926:3333.0063: fixing up Keytouch IEC report descriptor [ 879.236206][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0063/input/input125 [ 879.315305][ T3694] keytouch 0003:0926:3333.0063: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 879.624627][ T4840] usb 4-1: USB disconnect, device number 55 [ 879.701558][ T3731] usb 5-1: USB disconnect, device number 36 [ 879.710866][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:10 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async, rerun: 64) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xc70, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x300, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000003f0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:10 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000005e8e89a194d15cb053fa83051a14c1"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) 03:09:10 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) syz_usb_disconnect(r0) [ 880.256688][T12841] __nla_validate_parse: 4 callbacks suppressed [ 880.256707][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 880.285042][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffff9e0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x368, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 880.304421][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 880.325507][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000012c632a70100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xe00, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fffffff00100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 880.426434][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 880.444290][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 880.473360][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 880.488138][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 880.520262][ T3690] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 880.599494][ T4840] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 880.759411][ T3731] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 880.869537][ T4840] usb 5-1: Using ep0 maxpacket: 32 [ 880.909848][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.921100][ T3690] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.930249][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.939828][ T3690] usb 4-1: config 0 descriptor?? [ 881.019547][ T4840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 881.030635][ T3731] usb 2-1: Using ep0 maxpacket: 32 [ 881.159810][ T3731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 881.219599][ T4840] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 881.232839][ T4840] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 881.241556][ T4840] usb 5-1: Product: syz [ 881.245730][ T4840] usb 5-1: Manufacturer: syz [ 881.250677][ T4840] usb 5-1: SerialNumber: syz [ 881.257315][ T4840] usb 5-1: config 0 descriptor?? [ 881.311557][ T4840] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 881.323025][ T4840] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 881.359878][ T3731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 881.368961][ T3731] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 881.377935][ T3731] usb 2-1: Product: syz [ 881.383842][ T3690] usbhid 4-1:0.0: can't add hid device: -32 [ 881.390215][ T3690] usbhid: probe of 4-1:0.0 failed with error -32 [ 881.396692][ T3731] usb 2-1: Manufacturer: syz [ 881.401792][ T3731] usb 2-1: SerialNumber: syz [ 881.420157][ T3731] usb 2-1: config 0 descriptor?? [ 881.466927][ T3731] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 881.477039][ T3731] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 881.803985][ T3731] usb 2-1: USB disconnect, device number 107 [ 881.812060][ T3731] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 883.235326][ T3731] usb 4-1: USB disconnect, device number 56 03:09:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x500, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf00, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000f0ffff0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 883.303386][T10944] usb 5-1: USB disconnect, device number 37 03:09:13 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) (async) syz_usb_disconnect(r0) (async) 03:09:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000007fffffff0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 883.353100][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 883.360904][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000009effffff0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 883.414368][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x1100, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x600, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f0ffffff0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001fffffff14000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 883.709395][ T3694] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 883.709499][ T3731] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 883.839380][T10944] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 883.959391][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 884.079629][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.091063][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 884.100200][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.109661][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 884.115972][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 884.118731][ T3731] usb 4-1: config 0 descriptor?? [ 884.239493][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 884.314262][ T3694] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 884.323370][ T3694] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 884.332793][ T3694] usb 2-1: Product: syz [ 884.336993][ T3694] usb 2-1: Manufacturer: syz [ 884.342057][ T3694] usb 2-1: SerialNumber: syz [ 884.352137][ T3694] usb 2-1: config 0 descriptor?? [ 884.401441][ T3694] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 884.413821][ T3694] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 884.422488][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 884.438703][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 884.447685][T10944] usb 5-1: Product: syz [ 884.452394][T10944] usb 5-1: Manufacturer: syz [ 884.457303][T10944] usb 5-1: SerialNumber: syz [ 884.467105][T10944] usb 5-1: config 0 descriptor?? [ 884.521267][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 884.532289][T10944] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 884.611101][ T3731] keytouch 0003:0926:3333.0064: fixing up Keytouch IEC report descriptor [ 884.629543][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0064/input/input126 [ 884.717439][ T3731] keytouch 0003:0926:3333.0064: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 885.013789][T10944] usb 4-1: USB disconnect, device number 57 03:09:16 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x700, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x2a03, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040000000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:16 executing program 3: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x9}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 886.393304][ T3690] usb 5-1: USB disconnect, device number 38 [ 886.421346][T12900] __nla_validate_parse: 6 callbacks suppressed [ 886.421366][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 886.437546][ T3690] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 886.482102][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 886.498485][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 886.530025][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 886.699465][ T3694] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 886.879355][ T3690] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 887.059794][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.070831][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 887.080445][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.090838][ T3694] usb 4-1: config 0 descriptor?? [ 887.119494][ T3690] usb 5-1: Using ep0 maxpacket: 32 [ 887.239474][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 887.410625][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 887.423927][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 887.432766][ T3690] usb 5-1: Product: syz [ 887.436931][ T3690] usb 5-1: Manufacturer: syz [ 887.446073][ T3690] usb 5-1: SerialNumber: syz [ 887.453170][ T3690] usb 5-1: config 0 descriptor?? [ 887.490826][ T3690] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 887.501678][ T3690] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 887.581235][ T3694] keytouch 0003:0926:3333.0065: fixing up Keytouch IEC report descriptor [ 887.592936][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0065/input/input127 [ 887.678515][ T3694] keytouch 0003:0926:3333.0065: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 887.989990][ T3690] usb 4-1: USB disconnect, device number 58 [ 889.484624][ T3731] usb 5-1: USB disconnect, device number 39 [ 889.494416][ T3731] ldusb 5-1:0.0: LD USB Device #1 now disconnected 03:09:19 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) read$char_usb(r1, &(0x7f0000000180)=""/4096, 0x1000) (async) syz_usb_disconnect(r0) (async) 03:09:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000200000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x3f00, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x900, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:19 executing program 3: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x9}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x9}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:09:19 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 889.639485][T12876] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 889.663034][ T3690] usb 2-1: USB disconnect, device number 108 [ 889.672829][ T3690] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:09:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000300000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 889.705064][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 889.736913][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000400000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000500000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xa00, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 889.794641][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.810818][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x5865, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000600000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 889.883796][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 889.894946][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 889.989441][ T3694] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 890.119495][ T3731] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 890.159464][ T3690] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 890.349804][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.365190][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 890.374482][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.385392][ T3694] usb 4-1: config 0 descriptor?? [ 890.390061][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 890.400415][ T3690] usb 2-1: Using ep0 maxpacket: 32 [ 890.509537][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 890.529648][ T3690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 890.699575][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 890.708732][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 890.717269][ T3731] usb 5-1: Product: syz [ 890.721648][ T3690] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 890.730829][ T3731] usb 5-1: Manufacturer: syz [ 890.735428][ T3731] usb 5-1: SerialNumber: syz [ 890.740132][ T3690] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 890.748570][ T3690] usb 2-1: Product: syz [ 890.753725][ T3690] usb 2-1: Manufacturer: syz [ 890.758946][ T3731] usb 5-1: config 0 descriptor?? [ 890.764128][ T3690] usb 2-1: SerialNumber: syz [ 890.773004][ T3690] usb 2-1: config 0 descriptor?? [ 890.801138][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 890.811847][ T3690] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 890.823630][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 890.832708][ T3690] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 890.870922][ T3694] keytouch 0003:0926:3333.0066: fixing up Keytouch IEC report descriptor [ 890.895541][ T3694] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0066/input/input128 [ 890.981252][ T3694] keytouch 0003:0926:3333.0066: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 891.154034][T10944] usb 2-1: USB disconnect, device number 109 [ 891.164222][T10944] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 891.275875][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.284494][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.299689][ T5338] usb 4-1: USB disconnect, device number 59 03:09:21 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x4e}, 0x4}) r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r1) 03:09:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x6000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb00, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:21 executing program 3: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x9}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 891.362180][ T3694] usb 5-1: USB disconnect, device number 40 [ 891.413423][ T3694] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 891.449139][T12952] __nla_validate_parse: 4 callbacks suppressed [ 891.449159][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 891.478156][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 891.487890][ T27] audit: type=1400 audit(1662433761.781:286): avc: denied { create } for pid=12953 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 891.508462][ T27] audit: type=1400 audit(1662433761.781:287): avc: denied { ioctl } for pid=12953 comm="syz-executor.1" path="socket:[76438]" dev="sockfs" ino=76438 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 03:09:22 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000800000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x6558, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xc00, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 891.869352][ T5338] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 891.902872][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000900000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 891.918481][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 891.930500][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 891.959526][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x700c, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xc70, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 892.036129][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 892.048812][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 892.071035][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 892.081328][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:22 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x4e}, 0x4}) (async) r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r1) 03:09:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000a00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x8100, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xe00, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 892.209449][ T22] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 892.229628][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.269179][ T5338] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 892.292212][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.334408][ T5338] usb 4-1: config 0 descriptor?? [ 892.449387][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 892.571963][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 892.740491][ T22] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 892.753852][ T22] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 892.762891][ T22] usb 5-1: Product: syz [ 892.767061][ T22] usb 5-1: Manufacturer: syz [ 892.772175][ T22] usb 5-1: SerialNumber: syz [ 892.778790][ T22] usb 5-1: config 0 descriptor?? [ 892.820649][ T22] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 892.836894][ T5338] keytouch 0003:0926:3333.0067: fixing up Keytouch IEC report descriptor [ 892.847242][ T22] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 892.858802][ T5338] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0067/input/input129 [ 892.945460][ T5338] keytouch 0003:0926:3333.0067: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 893.233439][ T5338] usb 4-1: USB disconnect, device number 60 [ 893.613678][ T5338] usb 5-1: USB disconnect, device number 41 [ 893.637843][ T5338] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x7, 0x102, {0x102, 0x1, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x99, @string={0x99, 0x3, "95aa3887ca9b9bbe2007c3823add928ab6038ecfe256aa6c7420ecc6eb4a6955f2fa7d0c457fecb6de9edf1ebc4a14be2a875534b4ce94340a9496fa953f9a4b496bcf87a9cff847f8f3a112a584365606d038b8fe9ff4f9f255eae16edc0ec3a3f44a808fc84a36a109877f12e6783dc25a69b32d06fc0d470c59f112564dec13fc23badc6169d9cc8d2470d899c75c53658a27afadf2"}}, &(0x7f0000000380)={0x0, 0xf, 0x12c, {0x5, 0xf, 0x12c, 0x4, [@generic={0xfc, 0x10, 0x4, "ce8a01130031fcdb1a01e0c93e14dba29ccd4556ae34f194fc8374f32eacff52829cb26a9e1727490fdaecc831abd2b7b2020ab8937d8652d4e24d91cd0e54ed1da8104d22774c73a0eab2b956267c4c7a4a24d5e86408d193b18a3bb9d1652ec60691f8f3434dfb516d09be0248c134b99a7346ecdd9a9037157c53fe2b7861177c275f12c892268a5faa59a258b7d222a09356427ab308df69ffb752b5025d4a44d5a5d6b9404a115c5a888098e30631ee04f2dae18a8c2eb4d7b2bc0926e61e8fd8b5b2cd0a68c285488f7a8360b5fc7088cf6d270a68343bbbb6e855b8e84a081f8e35d16e4d3944b6532d38c13e07831e6b98c66812e5"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf, 0x5, [0xc000, 0xc00f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "581b699f10fd26bfb91f0738969fa3e4"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1, 0x8, 0x81, "65250611", "3ed2b077"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1, 0x10, 0x5, 0x87e9, 0x8001}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x3, "396ac2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf0ff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "bded"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xa992}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="dfbf5bb4f7d3"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "fb66"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9ae}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 894.039438][ T3731] usb 4-1: new high-speed USB device number 61 using dummy_hcd 03:09:24 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x8, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:24 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x4e}, 0x4}) r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x4e}, 0x4}) (async) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r1) (async) 03:09:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000b00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf00, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000f00000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x34000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001100000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000f000000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 894.459518][T10944] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 894.469595][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.480574][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 894.489955][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.510176][ T3731] usb 4-1: config 0 descriptor?? [ 894.699474][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 894.819412][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 894.981492][ T3731] keytouch 0003:0926:3333.0068: fixing up Keytouch IEC report descriptor [ 894.992301][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 895.005283][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 895.006588][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0068/input/input130 [ 895.017383][T10944] usb 5-1: Product: syz [ 895.040413][T10944] usb 5-1: Manufacturer: syz [ 895.045081][T10944] usb 5-1: SerialNumber: syz [ 895.051613][T10944] usb 5-1: config 0 descriptor?? [ 895.090777][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 895.105614][T10944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 895.127060][ T3731] keytouch 0003:0926:3333.0068: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 895.884250][ T5338] usb 5-1: USB disconnect, device number 42 [ 895.890261][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 895.901107][ T5338] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x7, 0x102, {0x102, 0x1, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x99, @string={0x99, 0x3, "95aa3887ca9b9bbe2007c3823add928ab6038ecfe256aa6c7420ecc6eb4a6955f2fa7d0c457fecb6de9edf1ebc4a14be2a875534b4ce94340a9496fa953f9a4b496bcf87a9cff847f8f3a112a584365606d038b8fe9ff4f9f255eae16edc0ec3a3f44a808fc84a36a109877f12e6783dc25a69b32d06fc0d470c59f112564dec13fc23badc6169d9cc8d2470d899c75c53658a27afadf2"}}, &(0x7f0000000380)={0x0, 0xf, 0x12c, {0x5, 0xf, 0x12c, 0x4, [@generic={0xfc, 0x10, 0x4, "ce8a01130031fcdb1a01e0c93e14dba29ccd4556ae34f194fc8374f32eacff52829cb26a9e1727490fdaecc831abd2b7b2020ab8937d8652d4e24d91cd0e54ed1da8104d22774c73a0eab2b956267c4c7a4a24d5e86408d193b18a3bb9d1652ec60691f8f3434dfb516d09be0248c134b99a7346ecdd9a9037157c53fe2b7861177c275f12c892268a5faa59a258b7d222a09356427ab308df69ffb752b5025d4a44d5a5d6b9404a115c5a888098e30631ee04f2dae18a8c2eb4d7b2bc0926e61e8fd8b5b2cd0a68c285488f7a8360b5fc7088cf6d270a68343bbbb6e855b8e84a081f8e35d16e4d3944b6532d38c13e07831e6b98c66812e5"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf, 0x5, [0xc000, 0xc00f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "581b699f10fd26bfb91f0738969fa3e4"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1, 0x8, 0x81, "65250611", "3ed2b077"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1, 0x10, 0x5, 0x87e9, 0x8001}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x3, "396ac2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf0ff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "bded"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xa992}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="dfbf5bb4f7d3"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "fb66"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9ae}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x7, 0x102, {0x102, 0x1, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x99, @string={0x99, 0x3, "95aa3887ca9b9bbe2007c3823add928ab6038ecfe256aa6c7420ecc6eb4a6955f2fa7d0c457fecb6de9edf1ebc4a14be2a875534b4ce94340a9496fa953f9a4b496bcf87a9cff847f8f3a112a584365606d038b8fe9ff4f9f255eae16edc0ec3a3f44a808fc84a36a109877f12e6783dc25a69b32d06fc0d470c59f112564dec13fc23badc6169d9cc8d2470d899c75c53658a27afadf2"}}, &(0x7f0000000380)={0x0, 0xf, 0x12c, {0x5, 0xf, 0x12c, 0x4, [@generic={0xfc, 0x10, 0x4, "ce8a01130031fcdb1a01e0c93e14dba29ccd4556ae34f194fc8374f32eacff52829cb26a9e1727490fdaecc831abd2b7b2020ab8937d8652d4e24d91cd0e54ed1da8104d22774c73a0eab2b956267c4c7a4a24d5e86408d193b18a3bb9d1652ec60691f8f3434dfb516d09be0248c134b99a7346ecdd9a9037157c53fe2b7861177c275f12c892268a5faa59a258b7d222a09356427ab308df69ffb752b5025d4a44d5a5d6b9404a115c5a888098e30631ee04f2dae18a8c2eb4d7b2bc0926e61e8fd8b5b2cd0a68c285488f7a8360b5fc7088cf6d270a68343bbbb6e855b8e84a081f8e35d16e4d3944b6532d38c13e07831e6b98c66812e5"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf, 0x5, [0xc000, 0xc00f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "581b699f10fd26bfb91f0738969fa3e4"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1, 0x8, 0x81, "65250611", "3ed2b077"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1, 0x10, 0x5, 0x87e9, 0x8001}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x3, "396ac2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf0ff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "bded"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xa992}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="dfbf5bb4f7d3"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "fb66"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9ae}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:09:27 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x5, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002c80), 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) read$char_usb(r4, &(0x7f0000000280)=""/4096, 0x1000) syz_usb_disconnect(r2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000240)=0x28) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$nl_route(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@delnexthop={0x28, 0x69, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{0x8}, {0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 03:09:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x400300, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x2000, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000003000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 896.771507][ T3731] usb 4-1: USB disconnect, device number 61 [ 896.810676][T13018] __nla_validate_parse: 12 callbacks suppressed 03:09:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000005000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 896.810697][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000006000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000007000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x2300, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 896.908778][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 896.924023][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 896.946345][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000009000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 897.054779][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 897.065081][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 897.097506][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 897.099440][T10944] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 897.119148][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 897.129427][ T4843] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 897.300006][ T3731] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 897.329549][ T4843] usb 2-1: device descriptor read/64, error 18 [ 897.359459][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 897.479460][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 897.609653][ T4843] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 897.649508][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 897.658581][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 897.667115][T10944] usb 5-1: Product: syz [ 897.671369][T10944] usb 5-1: Manufacturer: syz [ 897.675964][T10944] usb 5-1: SerialNumber: syz [ 897.683009][T10944] usb 5-1: config 0 descriptor?? [ 897.709586][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.720930][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 897.722428][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 897.730529][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.749446][T10944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 897.762721][ T3731] usb 4-1: config 0 descriptor?? [ 897.809643][ T4843] usb 2-1: device descriptor read/64, error 18 [ 897.929821][ T4843] usb usb2-port1: attempt power cycle [ 898.261023][ T3731] keytouch 0003:0926:3333.0069: fixing up Keytouch IEC report descriptor [ 898.273054][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0069/input/input131 [ 898.363296][ T4843] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 898.377061][ T3731] keytouch 0003:0926:3333.0069: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 898.521716][ T3731] usb 5-1: USB disconnect, device number 43 [ 898.532695][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 898.579704][ T4843] usb 2-1: device descriptor read/8, error -61 [ 898.849364][ T4843] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 899.023705][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.036921][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.039506][ T4843] usb 2-1: device descriptor read/8, error -61 03:09:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x7, 0x102, {0x102, 0x1, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x99, @string={0x99, 0x3, "95aa3887ca9b9bbe2007c3823add928ab6038ecfe256aa6c7420ecc6eb4a6955f2fa7d0c457fecb6de9edf1ebc4a14be2a875534b4ce94340a9496fa953f9a4b496bcf87a9cff847f8f3a112a584365606d038b8fe9ff4f9f255eae16edc0ec3a3f44a808fc84a36a109877f12e6783dc25a69b32d06fc0d470c59f112564dec13fc23badc6169d9cc8d2470d899c75c53658a27afadf2"}}, &(0x7f0000000380)={0x0, 0xf, 0x12c, {0x5, 0xf, 0x12c, 0x4, [@generic={0xfc, 0x10, 0x4, "ce8a01130031fcdb1a01e0c93e14dba29ccd4556ae34f194fc8374f32eacff52829cb26a9e1727490fdaecc831abd2b7b2020ab8937d8652d4e24d91cd0e54ed1da8104d22774c73a0eab2b956267c4c7a4a24d5e86408d193b18a3bb9d1652ec60691f8f3434dfb516d09be0248c134b99a7346ecdd9a9037157c53fe2b7861177c275f12c892268a5faa59a258b7d222a09356427ab308df69ffb752b5025d4a44d5a5d6b9404a115c5a888098e30631ee04f2dae18a8c2eb4d7b2bc0926e61e8fd8b5b2cd0a68c285488f7a8360b5fc7088cf6d270a68343bbbb6e855b8e84a081f8e35d16e4d3944b6532d38c13e07831e6b98c66812e5"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf, 0x5, [0xc000, 0xc00f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "581b699f10fd26bfb91f0738969fa3e4"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1, 0x8, 0x81, "65250611", "3ed2b077"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1, 0x10, 0x5, 0x87e9, 0x8001}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x3, "396ac2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf0ff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "bded"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xa992}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="dfbf5bb4f7d3"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "fb66"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9ae}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x7, 0x102, {0x102, 0x1, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x99, @string={0x99, 0x3, "95aa3887ca9b9bbe2007c3823add928ab6038ecfe256aa6c7420ecc6eb4a6955f2fa7d0c457fecb6de9edf1ebc4a14be2a875534b4ce94340a9496fa953f9a4b496bcf87a9cff847f8f3a112a584365606d038b8fe9ff4f9f255eae16edc0ec3a3f44a808fc84a36a109877f12e6783dc25a69b32d06fc0d470c59f112564dec13fc23badc6169d9cc8d2470d899c75c53658a27afadf2"}}, &(0x7f0000000380)={0x0, 0xf, 0x12c, {0x5, 0xf, 0x12c, 0x4, [@generic={0xfc, 0x10, 0x4, "ce8a01130031fcdb1a01e0c93e14dba29ccd4556ae34f194fc8374f32eacff52829cb26a9e1727490fdaecc831abd2b7b2020ab8937d8652d4e24d91cd0e54ed1da8104d22774c73a0eab2b956267c4c7a4a24d5e86408d193b18a3bb9d1652ec60691f8f3434dfb516d09be0248c134b99a7346ecdd9a9037157c53fe2b7861177c275f12c892268a5faa59a258b7d222a09356427ab308df69ffb752b5025d4a44d5a5d6b9404a115c5a888098e30631ee04f2dae18a8c2eb4d7b2bc0926e61e8fd8b5b2cd0a68c285488f7a8360b5fc7088cf6d270a68343bbbb6e855b8e84a081f8e35d16e4d3944b6532d38c13e07831e6b98c66812e5"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf, 0x5, [0xc000, 0xc00f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "581b699f10fd26bfb91f0738969fa3e4"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1, 0x8, 0x81, "65250611", "3ed2b077"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1, 0x10, 0x5, 0x87e9, 0x8001}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x3, "396ac2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf0ff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "bded"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xa992}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="dfbf5bb4f7d3"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "fb66"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9ae}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:09:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000a000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 899.074129][ T3731] usb 4-1: USB disconnect, device number 62 [ 899.112469][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 899.131204][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 899.170426][ T4843] usb usb2-port1: unable to enumerate USB device [ 899.529742][ T3731] usb 4-1: new high-speed USB device number 63 using dummy_hcd 03:09:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) (async) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002c80), 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) read$char_usb(r4, &(0x7f0000000280)=""/4096, 0x1000) (async) syz_usb_disconnect(r2) (async) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000240)=0x28) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$nl_route(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@delnexthop={0x28, 0x69, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{0x8}, {0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 03:09:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x3f00, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:30 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000b000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000f000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x3000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 899.899454][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.917311][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 899.930444][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:09:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000011000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 899.952592][ T3731] usb 4-1: config 0 descriptor?? [ 900.099635][T10944] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 900.309460][ T4840] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 900.359343][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 900.440665][ T3731] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 900.452606][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006A/input/input132 [ 900.479463][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 900.502727][ T4840] usb 2-1: device descriptor read/64, error 18 [ 900.544320][ T3731] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 900.649717][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 900.658796][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 900.667661][T10944] usb 5-1: Product: syz [ 900.672157][T10944] usb 5-1: Manufacturer: syz [ 900.676770][T10944] usb 5-1: SerialNumber: syz [ 900.694717][T10944] usb 5-1: config 0 descriptor?? [ 900.742078][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 900.756825][T10944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 900.789555][ T4840] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 900.989378][ T4840] usb 2-1: device descriptor read/64, error 18 [ 901.111050][ T4840] usb usb2-port1: attempt power cycle 03:09:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x5865, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000003f000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 901.197843][T13069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.206592][T13069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.221810][T10944] usb 4-1: USB disconnect, device number 63 [ 901.538366][ T3731] usb 5-1: USB disconnect, device number 44 [ 901.544391][ T4840] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 901.553671][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 901.749398][ T4840] usb 2-1: device descriptor read/8, error -61 [ 902.029524][ T4840] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 902.209455][ T4840] usb 2-1: device descriptor read/8, error -61 [ 902.331339][ T4840] usb usb2-port1: unable to enumerate USB device 03:09:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) (async) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) (async, rerun: 32) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002c80), 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) read$char_usb(r4, &(0x7f0000000280)=""/4096, 0x1000) syz_usb_disconnect(r2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000240)=0x28) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$nl_route(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@delnexthop={0x28, 0x69, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{0x8}, {0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 03:09:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0xd5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x78, 0x8, 0x85}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1f, 0x46, 0x0, 0xff, 0x7}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0xfe, 0x101}]}, 0x8, [{0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="76038a00e113ecb0a298fbc55ff8836f2ce512460a4a83142393a763b4ed603ebc5a8ed17fb31b128206d0ee6ced108ca98fbf9ab23e8b3f663a76ace6d06ae57d08f52400dae34610c10eb1468c6ee43df6073518cc473dec56455f02417e47ea5641a233375e920f7721c8afe60000000000000000"]}, {0x102, &(0x7f00000002c0)=@string={0x102, 0x3, "fe7444c6a7479a31f0d9bd1fe660720aecf9313df010a9c867e7a01b3721e20c3697ab401e8e5e1948538812be3111bba708375b1486cee4efd1468ed70f046b6694f8d6f02273efe471d76b9f03341f1925991533c4a028214abee6e678c7feb7c51608a9244634258c3acd82a43f4aa9ff7bce25db57167c6653fc63a19567b106938e018baa9c40e471996ba727b0d2a72aad9b0c9d3f8542e230c24a8774f5036960bcd9ef12757f75c79479dc61dab9a9532f6d01afadb03656bc5fbd6dd4b1109fd27fbb9e0041eed67fc4262bfc6ec659b8d73b59db7876d86c7f32e3994ecce5145a8ddf66ea079e8875574a042b0fc02162e675583dd8d0c30d6685"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x1a, &(0x7f0000000400)=@string={0x1a, 0x3, "5493a816c1d48be489bf619d07fd591db25ed4a00f942438"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x848}}, {0xd1, &(0x7f0000000480)=@string={0xd1, 0x3, "1ef5435171a1008db4d95a3f3234ed081c405697e2e53a5803ca2b11ad8e64037d9724c9dac41de6d0d1a8a0ed08b8006083d57d9d2a1fff426a0138b56dc3acb9c88f5e770bd07b16865e3fac8f9b71bde01ab223f861be0a03a0ced7aec95ad0798fa60a3231143ab7d82129544ae010a86cd6ac5e9a132f9125d8a67c998af53d7b928b4471352c45f025a17d0f09e5562ffe6a7187a386706d7a2e39c90c2787a3ee21ab7d576cc3798065ba9f84623c3bef64277b047bf84292d13b12fa6cd4eab1a5d3a253f96b6d98d27375"}}, {0x68, &(0x7f0000000580)=@string={0x68, 0x3, "ccaa4f77297807856185830bff5018843ebe631fc273bace1fc2a8a4f6ca06c856c208d83d63c31fe3525520921d6dcd219ae969bd7e2b83eee66489d766e0999352f9f6e0570d919ec543642ae5f03c581db2de64023f70d755d6ff356d70e1e8c0258ff1bd"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00H'], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001e00)={0x2c, &(0x7f0000001c40)={0x20, 0xe, 0x94, {0x94, 0x23, "8e152bf983b7bbadc3a758e83a4389c96eb6ea77ba997a9cb8a0b20daa673d53cf6078751a5b68ba0287b49e41e3bf5cf01e2abcb5bb04f416fb0d1cd52196384eedb8874cb8d51e4eb47e64b57351ded84ae623785078db31126a370efc869b3575419282f428dbdea269970688535bfa9f0b65245d3b82205ad6d801c80dfe0cd65ee095a003b2f8780e01c97f2e4c5a90"}}, &(0x7f0000001d00)={0x0, 0x3, 0xd, @string={0xd, 0x3, "607db765552189009b31c7"}}, &(0x7f0000001d40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x1, 0x9, "4d1f89bd", "9dac81f2"}}, &(0x7f0000001dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x10, 0xba, 0x0, 0x1, 0xfff, 0x7f}}}, &(0x7f0000002280)={0x84, &(0x7f0000001e40)={0x40, 0xe, 0xab, "4b9059c13aaad32ab97472b3009d20ddee0be0622154333dc7c275e5032cd7f98c236828b99cd9e006527ca6b46c12d5b8006993fcf90a8154716dc4429ab8d7582ddb8377d887ac5b3ee947b1f119785be6a1f65bbbd0210dbe546b6e87de041f50f3c705be8e98ed131d0fe509e8cc0a04bcc03d8292030245ee7b221e97c3d9057238eeaf067430f3bc271445cf7769ac8739cdea21dad83e0b128c66654769b59837daa7af6b489e3e"}, &(0x7f0000001f00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001f40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001f80)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0xfffffffffffffffc, &(0x7f0000001fc0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000002000)={0x40, 0x9, 0x1, 0xd4}, &(0x7f0000002040)={0x40, 0xb, 0x2, "c292"}, &(0x7f0000002080)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000020c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002140)={0x40, 0x19, 0x2, "1cd4"}, &(0x7f0000002180)={0x40, 0x1a, 0x2, 0x37}, &(0x7f00000021c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002200)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002240)={0x40, 0x21, 0x1, 0x20}}) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, &(0x7f0000000680)={0x40, 0x9, 0xc6, {0xc6, 0xb, "d03d4ab5eb6612aa35663354dd71375d19eb0831f22bbc92d76111e7563be14fa0e0be1bc9b55f0de9b17fd6446bf3c759661f61bd82facd131c0b3876010830c474a8676c14878d53a5083f6ba42e01c63cc4e77f1d202772037970fcabf28e14010de2545f783a4d7fb5d32517eb02e176be71d5680988090de4fe2a172533053ea9ff91065abe838a4bbfe18127d79ae4fed1437da1c2423abbd6b28f04f8ace300f907746ba90f40b3c2a93b4410494bfe30a3b86a57605f7b5fe8a4a8bcb407d21f"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f00000007c0)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x7, "0ee9e61a"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_4={0x3, 0x0, 0x9, "3922890f"}, @main=@item_012={0x1, 0x0, 0xb, "c3"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0xd5d}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x20, 0xc, 0xc3, "f4ca79f05d796fdeaf9056dc9219cc131f0ca9a4fb5aa84e7940c12f88ff37de15f1fa8f3817473a13e07b5c8c1e20ab064dafd28b95ed380d7647b9a18d5ce06094f879e2d6e531bd2b7cba3ba2949e49a2288c180a3e8874dfa4ea6f79c5a5f8c794fa0cc6cded6f3fda912c907d51785850ee3f2cc64dedb2b2d816ef4ec540473bc65cfc2039c0a7a41cc7bd33fd6884ca16f219b7ebabac480efd08ac215a7baeb91f0c7030e36f63b9ce89d883e4492a2bc7b357eba4a3d251591759eec6c917"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x55, "946e006d026b2e9f090b6cbc1170734b0480f7a3e7dfb368a448c8239c860decf3179be99db2f95bb80e70c6599bfd09ffbb4550678650be82c402b6d2a891522641db544765a2dd9e92cec198e0a5c6c15cc366ea"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x8}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x67f, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x19, 0xa4, 0x7a, 0x20, 0x11c9, 0xbf7c, 0x7f52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66d, 0x4, 0xd4, 0x7, 0x80, 0x80, [{{0x9, 0x4, 0xa3, 0xc9, 0x0, 0xff, 0x5d, 0x81, 0x1, [@generic={0x83, 0x23, "1bde71dece06bea7f48877f54116d87eb639693d2500be529d8073686ce6e9777eb1dc97765df6956c1f95b907eeb2fd09af027b46ca77ed87a311669258d74d8842dbbda3fd4a85cd96e286fa9c8aa0f2d9a69f53f8899ee8d46c280f8c1ea9631e1bb7fa85fe9a0c09a5edbb3dd5d03e9a79b79fa236cc5410f53cf85f1b698a"}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x3, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x23, 0x1}, @obex={0x5, 0x24, 0x15, 0x20}, @dmm={0x7, 0x24, 0x14, 0xff01, 0x5}, @acm={0x4, 0x24, 0x2, 0xf}]}]}}, {{0x9, 0x4, 0x96, 0x1, 0x1, 0xb7, 0xb5, 0x50, 0x63, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "c7ec8bdb54"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x81, 0x0, 0x73}, [@obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0xd7, 0x1f}, @mbim={0xc, 0x24, 0x1b, 0xaf, 0xa9, 0x3f, 0x7, 0x8, 0x2}, @acm={0x4}, @ncm={0x6, 0x24, 0x1a, 0x100, 0x2a}, @dmm={0x7, 0x24, 0x14, 0x5, 0x5}]}], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x12, 0x68, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}, @generic={0x35, 0x9, "0f3a88ef57ea3e573fcb233d9f94aa5933ae9d8b7e93a85eedd1afbc8dfcd208b606d2e11a71cc4e5c64618a64a5c3e24429cf"}]}}]}}, {{0x9, 0x4, 0x46, 0x1f, 0xe, 0x4c, 0x85, 0x66, 0x1f, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "5005dac7fa"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4, 0x7, 0x4}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0x58}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xff, 0xf9, 0x7f}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0xe, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x2, 0x1, 0x72, [@generic={0x67, 0x30, "3d89ea33575dcae70a5d05b88264ca2187d37f5ddf16352b4891ae3ce814093a1e21924d8f35abf8d244a0d170dccc0ebc8fa83cce58454ed4f5b90aad939ea23dbb9645724caaaedf0c00198c7bfc1b93b8d3b6d5b9cc967b583893597fbbbb972ef5c958"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3f, 0x2, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd2, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x20, 0x9, 0x2, [@generic={0xca, 0x24, "becf36d4482d1faf0e2891dcdd845503b388838c361b04409ef3b61f771dbe49c7558aceed4e5d4c577405a9772a699c3755014e853142e74147b8d7aaa026f5ee227da78ed29da37993d3e09ea919081db4aab05e5a5ece8fd7c87208884fbb6056e66ccee5bca2033160e8bf5e3d3ad20ad2704353f2b9aff4687763d4c230bcf6feb63cfc02ed207571caa4adfa05acc077edc6805022ad3ed7437b043fdcfc4a528a0b358c394c7b0f8a98478b889e4c6c3eec3a264f8371e412c675e0dd057044dad5e7e895"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x92, 0x7f, 0x8, [@generic={0xda, 0x24, "1998bbcea7928ec48e94ef77d7f08ef22b897d63a7b00fa4cbe1f1086d74f5673f316306893d70af9c3d52987546cdb258884a8b8a5cb6143be9c20cf7003ad53bf5f24700560b4bc4b37edcbc08732e812ee8c6fb61b9abfec38af393df82d9b9050bd555e56ba31a6f0617885002254d23b1b148b5131588ad15515c3bdfac86476144728667206c24b934681d3e536ffe53641f7f3b07c2e9128909b164f7dbb5c942560d6ddfb92e310072e17c524afb946da7d02ee4c04f7c92dac0778c87aa295e8a24c20835670ec85d4e1c455535c8c5777f94a6"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x3, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}, @generic={0x5, 0xa, "85082c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x4, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x22}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x6, 0x2a, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9b, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x64, 0x8, 0x0, [@generic={0x35, 0xc, "0fcfa98be99a07f4abf3c8069fbdbc89c2851a297cd7e36d16f74446c6c5399550ce269a88ef4f27a50c186a38439a73b66de7"}, @generic={0xb4, 0x2, "b0ce4b7c9653b0fde981441c7eb668d6efab9423ae2458d69df8035f801428b2e573c832d1be60d160881fcc1dae22ea57d58c9e36ea5e1d0255dd05540876f8b7ea99c3e51af4e89eb6b80db18cdfeaf2bd021752816046f2ce2ad1bf2dced4bae5af291dfb41f26be7313d93e7a8c882fca54f09a838ad4214dd483a094611f008479a9423b31ec2356b720cf56391732431b71f44c02a698fac3ef85c3a448361309bcb4ac48da9f1c19df55817a59e1b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x5e, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x2, 0x0, 0x5, [@generic={0xec, 0x0, "eda28cc58c5471fb2dadfdc01e4bc29b40abe1288d228f8779ae96c5917a3ccc3fb1eb5d3904d46be4a041fe194d2a7fad89df9f4d75eda82f41991caeeda6dd5494e226a17ffee0cba74af2eeebedf6f9470cb65723bf1023ce35087181f9bc80ae072b68d2d695e3f423df7c4d08fcb5ee3b86095171a8e4f2a7d04172eb97a17443192dd0ae4f7ce7b1cab086d6240ae94bd89c72c2ebebd08e5ac9c6ab2d18d1e209456cbbf0b0ea323f9d8a4d2fe5d944016ae2b8484cd43adf5fa54fc9da9d2b4b4fbc5835c8d3d001aceb91bce142f218adb509b08086843b21c8edb34f32793126d2fb6478a1"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0xff, 0x0, 0x3f}}]}}, {{0x9, 0x4, 0x60, 0x3f, 0x1, 0xdb, 0x78, 0x13, 0x6, [], [{{0x9, 0x5, 0x8c, 0x3, 0x200, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x8c}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4ffa}]}}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0x0, 0xff, 0x63, 0x20, 0x40}, 0x29, &(0x7f0000001980)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x9, 0xf00, 0x6, [0x0, 0x3f00, 0x3f30, 0x0, 0xff3fc0, 0xff0030]}]}, 0x4, [{0x5c, &(0x7f00000019c0)=@string={0x5c, 0x3, "093fcd6b4c39e375e8dc10f2415dfb8ae27e28a083b5713358119ae44207d4fa24f602234e4177b50b5e7cb9209eec03b3d3fc67e04d8e7eff2e62d0c5e656fd9843519f4dffcf4e4625190838fd25a52fca9891bf2d4f02d5ef"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x4ff}}, {0xfe, &(0x7f0000001ac0)=@string={0xfe, 0x3, "3e3c10ad2ec005c8269350e3ee7f4c9985056547a7f3fdf15c696463592549e613bf0167d6a7e54c987637ae6fe228f3cf5934bbbafc5d2385c9b7684f973054060f37f8f13cff67e6cf19a0d19953c76610c6c539686a0d2a98b06a2cf876d40e17579f37de7801a0db72c37b9bde8ff13bbd051be5d3c442c32576cba1e875d3fd0269a9844b32a34edb77603cb49db6fcff11f73305789c6613c7aeec1afb29905c9244f5e3ddf8b69bf53cabb1b0e1f4ee488d47c3c11ab9306b7be3d9981e2064cfc2ae74287b557414731a8300d9f994124d63bc419dda22eb1ba26567c11a002ef8d6ac78e5e4a750394bebdc3d31c2a3003c980514b4e521"}}]}) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x20, 0x9, 0xb5, {0xb5, 0xa, "2e05f0dbbde30dc088bca0f26165bb090862954187d946b2dfc8e587e135731ee149b45e5e2d25c3f971a5c11cf40550fe58d07f9e46baa5631a9750f7a61e9c63c2f1578ff9df0c3a2bfde1a32a488965f6803613d3bd3d149f8a78a509475db72a842d013c654501f4ae13914bd2e2fae47a50d2b325eaca13eff8f3b059c0a852072ea2087690c659c6f5c706455759078942fa44bb837de9c36cfb2253e002772d4b0c8bb9e41a2fe840a0023cabdd6964"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000c00)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x56, 0x7f, 0x9, 0xfffb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "95afc5c54c0c6fae4a9de8ac6455e04c"}, @ssp_cap={0x20, 0x10, 0xa, 0x40, 0x5, 0x1000, 0xff00, 0x2, [0xc0, 0xc0, 0x180, 0x60, 0xa0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1f, 0x1f, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x6, 0x400}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x39, 0x5a, 0x4, "8ec721f7", "a7c04ab0"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9b, 0x2, 0x0, 0x1, 0x4c, 0xfbaf, 0x4}}}, &(0x7f0000001200)={0x84, &(0x7f0000000d40)={0x0, 0x18, 0xd2, "7abe087d7fda88af5c8fdf81eb7b8c04bd670a6818c8a87fdb61733bbe104bb6a266415037b68ecb645eecc834ddeead56216ca39e4eb3061040864bfb0f508ccb0328bc92a0cd52db8b2d3edde4926c6a8380c576022854879db69857169b7f2bb8253183b40ba25dd46758b09d2368e1ae12296d5f0d8e6c1cb3c3e08ac2fa47302d5b20d49d4bdaf342c6a80f2003f0bad0234911cb3964c8770ff098da925d32a08fb998d8cd115e6d78fe5705655072bd681974f8af02d8801be1c4ce9972351d902c06c44134b9ade5546beee3ce10"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x2, 0x80}}, &(0x7f0000000f40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "df86"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001080)={0x40, 0x17, 0x6}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "619a"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x3}}) 03:09:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x5000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000f0000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6000, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:33 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) [ 902.886038][T13086] __nla_validate_parse: 12 callbacks suppressed [ 902.886058][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x20, 0x7, 0x5, {0x5, 0x2, "ebbb56"}}, &(0x7f0000000180)={0x0, 0x3, 0x3, @string={0x3, 0x3, "c9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f74000000050f7400060b1001080800070220001114100402d37c333d8bb990ea32a3ee70753c10516c4daa893883b277f32046e59033620b100100400009090300f83f1002cad6dbb2d8d23a848ff0dfcf20baf5341f9a319e9b37fe219e18cbba0def50cb5697c8f32386a9c6d6cd6c1cbb6910aa3f0ef6"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x0, 0x2, "7493b75b", "3decfedd"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x2, 0x1, 0x7, 0xe717, 0x8000}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0x3, 0xcc, "f45d919f6e04b884e9d5ecb5155af9e9c09e83836c29bff0156fb41cee68712c1cd2e1cf1a156a4bb87d7278256c9999a4292419fbe50d316ff2a70db9cf3992bd9f8f4b923df21e6f42bbfbe87654dd43574dd0074d9a06c17956d5d03153ea1610bc7f3328745d2b0896c9915a96ebbfd7c74414b3474d2b745f5edbf5a77c78091fb15079fd3b30945c58a1733eac7ccfaad399f4fecd40ebc1c6e15b24050209aca8da2c63ec1020ff33c4d15d5f6bf273a77c2f34f77cc154d4eaa896e5ed6868be20b0f814cc8c32dc"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5d}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xa0, 0x10, [0xf0f0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "f729"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "388c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) [ 902.939861][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 902.962739][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 903.000042][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:09:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6558, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x6000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 903.108484][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 903.119154][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 903.150735][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 903.169873][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 903.169997][ T4843] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 903.179845][ T5338] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 903.399471][T10944] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 903.439540][ T4843] usb 5-1: Using ep0 maxpacket: 32 [ 903.560430][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 903.599693][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.615837][ T5338] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 903.625512][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.640719][ T5338] usb 4-1: config 0 descriptor?? [ 903.679482][T10944] usb 2-1: Using ep0 maxpacket: 32 [ 903.729875][ T4843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 903.739030][ T4843] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 903.747955][ T4843] usb 5-1: Product: syz [ 903.752276][ T4843] usb 5-1: Manufacturer: syz [ 903.756954][ T4843] usb 5-1: SerialNumber: syz [ 903.766694][ T4843] usb 5-1: config 0 descriptor?? [ 903.813180][ T4843] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 903.824015][ T4843] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 903.831691][T10944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 904.009524][T10944] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 904.018620][T10944] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 904.027622][T10944] usb 2-1: Product: syz [ 904.032201][T10944] usb 2-1: Manufacturer: syz [ 904.036907][T10944] usb 2-1: SerialNumber: syz [ 904.045932][T10944] usb 2-1: config 0 descriptor?? [ 904.100972][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.110213][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.112168][T10944] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 904.128836][T10944] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 904.328520][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.338753][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.350422][ T5338] keytouch 0003:0926:3333.006B: fixing up Keytouch IEC report descriptor [ 904.366417][ T5338] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006B/input/input133 [ 904.402236][ T3694] usb 2-1: USB disconnect, device number 118 [ 904.459178][ T5338] keytouch 0003:0926:3333.006B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 904.557057][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.568931][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.578476][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.589938][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.599070][ T4843] usb 4-1: USB disconnect, device number 64 03:09:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0xd5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x78, 0x8, 0x85}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1f, 0x46, 0x0, 0xff, 0x7}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0xfe, 0x101}]}, 0x8, [{0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="76038a00e113ecb0a298fbc55ff8836f2ce512460a4a83142393a763b4ed603ebc5a8ed17fb31b128206d0ee6ced108ca98fbf9ab23e8b3f663a76ace6d06ae57d08f52400dae34610c10eb1468c6ee43df6073518cc473dec56455f02417e47ea5641a233375e920f7721c8afe60000000000000000"]}, {0x102, &(0x7f00000002c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x1a, &(0x7f0000000400)=@string={0x1a, 0x3, "5493a816c1d48be489bf619d07fd591db25ed4a00f942438"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x848}}, {0xd1, &(0x7f0000000480)=@string={0xd1, 0x3, "1ef5435171a1008db4d95a3f3234ed081c405697e2e53a5803ca2b11ad8e64037d9724c9dac41de6d0d1a8a0ed08b8006083d57d9d2a1fff426a0138b56dc3acb9c88f5e770bd07b16865e3fac8f9b71bde01ab223f861be0a03a0ced7aec95ad0798fa60a3231143ab7d82129544ae010a86cd6ac5e9a132f9125d8a67c998af53d7b928b4471352c45f025a17d0f09e5562ffe6a7187a386706d7a2e39c90c2787a3ee21ab7d576cc3798065ba9f84623c3bef64277b047bf84292d13b12fa6cd4eab1a5d3a253f96b6d98d27375"}}, {0x68, &(0x7f0000000580)=@string={0x68, 0x3, "ccaa4f77297807856185830bff5018843ebe631fc273bace1fc2a8a4f6ca06c856c208d83d63c31fe3525520921d6dcd219ae969bd7e2b83eee66489d766e0999352f9f6e0570d919ec543642ae5f03c581db2de64023f70d755d6ff356d70e1e8c0258ff1bd"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00H'], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000001e00)={0x2c, &(0x7f0000001c40)={0x20, 0xe, 0x94, {0x94, 0x23, "8e152bf983b7bbadc3a758e83a4389c96eb6ea77ba997a9cb8a0b20daa673d53cf6078751a5b68ba0287b49e41e3bf5cf01e2abcb5bb04f416fb0d1cd52196384eedb8874cb8d51e4eb47e64b57351ded84ae623785078db31126a370efc869b3575419282f428dbdea269970688535bfa9f0b65245d3b82205ad6d801c80dfe0cd65ee095a003b2f8780e01c97f2e4c5a90"}}, &(0x7f0000001d00)={0x0, 0x3, 0xd, @string={0xd, 0x3, "607db765552189009b31c7"}}, &(0x7f0000001d40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x1, 0x9, "4d1f89bd", "9dac81f2"}}, &(0x7f0000001dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x10, 0xba, 0x0, 0x1, 0xfff, 0x7f}}}, &(0x7f0000002280)={0x84, &(0x7f0000001e40)={0x40, 0xe, 0xab, "4b9059c13aaad32ab97472b3009d20ddee0be0622154333dc7c275e5032cd7f98c236828b99cd9e006527ca6b46c12d5b8006993fcf90a8154716dc4429ab8d7582ddb8377d887ac5b3ee947b1f119785be6a1f65bbbd0210dbe546b6e87de041f50f3c705be8e98ed131d0fe509e8cc0a04bcc03d8292030245ee7b221e97c3d9057238eeaf067430f3bc271445cf7769ac8739cdea21dad83e0b128c66654769b59837daa7af6b489e3e"}, &(0x7f0000001f00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001f40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001f80)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0xfffffffffffffffc, &(0x7f0000001fc0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000002000)={0x40, 0x9, 0x1, 0xd4}, &(0x7f0000002040)={0x40, 0xb, 0x2, "c292"}, &(0x7f0000002080)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000020c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002140)={0x40, 0x19, 0x2, "1cd4"}, &(0x7f0000002180)={0x40, 0x1a, 0x2, 0x37}, &(0x7f00000021c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002200)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002240)={0x40, 0x21, 0x1, 0x20}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, &(0x7f0000000680)={0x40, 0x9, 0xc6, {0xc6, 0xb, "d03d4ab5eb6612aa35663354dd71375d19eb0831f22bbc92d76111e7563be14fa0e0be1bc9b55f0de9b17fd6446bf3c759661f61bd82facd131c0b3876010830c474a8676c14878d53a5083f6ba42e01c63cc4e77f1d202772037970fcabf28e14010de2545f783a4d7fb5d32517eb02e176be71d5680988090de4fe2a172533053ea9ff91065abe838a4bbfe18127d79ae4fed1437da1c2423abbd6b28f04f8ace300f907746ba90f40b3c2a93b4410494bfe30a3b86a57605f7b5fe8a4a8bcb407d21f"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f00000007c0)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x7, "0ee9e61a"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_4={0x3, 0x0, 0x9, "3922890f"}, @main=@item_012={0x1, 0x0, 0xb, "c3"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0xd5d}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x20, 0xc, 0xc3, "f4ca79f05d796fdeaf9056dc9219cc131f0ca9a4fb5aa84e7940c12f88ff37de15f1fa8f3817473a13e07b5c8c1e20ab064dafd28b95ed380d7647b9a18d5ce06094f879e2d6e531bd2b7cba3ba2949e49a2288c180a3e8874dfa4ea6f79c5a5f8c794fa0cc6cded6f3fda912c907d51785850ee3f2cc64dedb2b2d816ef4ec540473bc65cfc2039c0a7a41cc7bd33fd6884ca16f219b7ebabac480efd08ac215a7baeb91f0c7030e36f63b9ce89d883e4492a2bc7b357eba4a3d251591759eec6c917"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x55, "946e006d026b2e9f090b6cbc1170734b0480f7a3e7dfb368a448c8239c860decf3179be99db2f95bb80e70c6599bfd09ffbb4550678650be82c402b6d2a891522641db544765a2dd9e92cec198e0a5c6c15cc366ea"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x8}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x67f, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x19, 0xa4, 0x7a, 0x20, 0x11c9, 0xbf7c, 0x7f52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66d, 0x4, 0xd4, 0x7, 0x80, 0x80, [{{0x9, 0x4, 0xa3, 0xc9, 0x0, 0xff, 0x5d, 0x81, 0x1, [@generic={0x83, 0x23, "1bde71dece06bea7f48877f54116d87eb639693d2500be529d8073686ce6e9777eb1dc97765df6956c1f95b907eeb2fd09af027b46ca77ed87a311669258d74d8842dbbda3fd4a85cd96e286fa9c8aa0f2d9a69f53f8899ee8d46c280f8c1ea9631e1bb7fa85fe9a0c09a5edbb3dd5d03e9a79b79fa236cc5410f53cf85f1b698a"}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x3, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x23, 0x1}, @obex={0x5, 0x24, 0x15, 0x20}, @dmm={0x7, 0x24, 0x14, 0xff01, 0x5}, @acm={0x4, 0x24, 0x2, 0xf}]}]}}, {{0x9, 0x4, 0x96, 0x1, 0x1, 0xb7, 0xb5, 0x50, 0x63, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "c7ec8bdb54"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x81, 0x0, 0x73}, [@obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0xd7, 0x1f}, @mbim={0xc, 0x24, 0x1b, 0xaf, 0xa9, 0x3f, 0x7, 0x8, 0x2}, @acm={0x4}, @ncm={0x6, 0x24, 0x1a, 0x100, 0x2a}, @dmm={0x7, 0x24, 0x14, 0x5, 0x5}]}], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x12, 0x68, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}, @generic={0x35, 0x9, "0f3a88ef57ea3e573fcb233d9f94aa5933ae9d8b7e93a85eedd1afbc8dfcd208b606d2e11a71cc4e5c64618a64a5c3e24429cf"}]}}]}}, {{0x9, 0x4, 0x46, 0x1f, 0xe, 0x4c, 0x85, 0x66, 0x1f, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "5005dac7fa"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4, 0x7, 0x4}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0x58}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xff, 0xf9, 0x7f}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0xe, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x2, 0x1, 0x72, [@generic={0x67, 0x30, "3d89ea33575dcae70a5d05b88264ca2187d37f5ddf16352b4891ae3ce814093a1e21924d8f35abf8d244a0d170dccc0ebc8fa83cce58454ed4f5b90aad939ea23dbb9645724caaaedf0c00198c7bfc1b93b8d3b6d5b9cc967b583893597fbbbb972ef5c958"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3f, 0x2, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd2, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x20, 0x9, 0x2, [@generic={0xca, 0x24, "becf36d4482d1faf0e2891dcdd845503b388838c361b04409ef3b61f771dbe49c7558aceed4e5d4c577405a9772a699c3755014e853142e74147b8d7aaa026f5ee227da78ed29da37993d3e09ea919081db4aab05e5a5ece8fd7c87208884fbb6056e66ccee5bca2033160e8bf5e3d3ad20ad2704353f2b9aff4687763d4c230bcf6feb63cfc02ed207571caa4adfa05acc077edc6805022ad3ed7437b043fdcfc4a528a0b358c394c7b0f8a98478b889e4c6c3eec3a264f8371e412c675e0dd057044dad5e7e895"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x92, 0x7f, 0x8, [@generic={0xda, 0x24, "1998bbcea7928ec48e94ef77d7f08ef22b897d63a7b00fa4cbe1f1086d74f5673f316306893d70af9c3d52987546cdb258884a8b8a5cb6143be9c20cf7003ad53bf5f24700560b4bc4b37edcbc08732e812ee8c6fb61b9abfec38af393df82d9b9050bd555e56ba31a6f0617885002254d23b1b148b5131588ad15515c3bdfac86476144728667206c24b934681d3e536ffe53641f7f3b07c2e9128909b164f7dbb5c942560d6ddfb92e310072e17c524afb946da7d02ee4c04f7c92dac0778c87aa295e8a24c20835670ec85d4e1c455535c8c5777f94a6"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x3, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}, @generic={0x5, 0xa, "85082c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x4, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x22}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x6, 0x2a, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9b, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x64, 0x8, 0x0, [@generic={0x35, 0xc, "0fcfa98be99a07f4abf3c8069fbdbc89c2851a297cd7e36d16f74446c6c5399550ce269a88ef4f27a50c186a38439a73b66de7"}, @generic={0xb4, 0x2, "b0ce4b7c9653b0fde981441c7eb668d6efab9423ae2458d69df8035f801428b2e573c832d1be60d160881fcc1dae22ea57d58c9e36ea5e1d0255dd05540876f8b7ea99c3e51af4e89eb6b80db18cdfeaf2bd021752816046f2ce2ad1bf2dced4bae5af291dfb41f26be7313d93e7a8c882fca54f09a838ad4214dd483a094611f008479a9423b31ec2356b720cf56391732431b71f44c02a698fac3ef85c3a448361309bcb4ac48da9f1c19df55817a59e1b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x5e, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x2, 0x0, 0x5, [@generic={0xec, 0x0, "eda28cc58c5471fb2dadfdc01e4bc29b40abe1288d228f8779ae96c5917a3ccc3fb1eb5d3904d46be4a041fe194d2a7fad89df9f4d75eda82f41991caeeda6dd5494e226a17ffee0cba74af2eeebedf6f9470cb65723bf1023ce35087181f9bc80ae072b68d2d695e3f423df7c4d08fcb5ee3b86095171a8e4f2a7d04172eb97a17443192dd0ae4f7ce7b1cab086d6240ae94bd89c72c2ebebd08e5ac9c6ab2d18d1e209456cbbf0b0ea323f9d8a4d2fe5d944016ae2b8484cd43adf5fa54fc9da9d2b4b4fbc5835c8d3d001aceb91bce142f218adb509b08086843b21c8edb34f32793126d2fb6478a1"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0xff, 0x0, 0x3f}}]}}, {{0x9, 0x4, 0x60, 0x3f, 0x1, 0xdb, 0x78, 0x13, 0x6, [], [{{0x9, 0x5, 0x8c, 0x3, 0x200, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x8c}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4ffa}]}}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0x0, 0xff, 0x63, 0x20, 0x40}, 0x29, &(0x7f0000001980)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x9, 0xf00, 0x6, [0x0, 0x3f00, 0x3f30, 0x0, 0xff3fc0, 0xff0030]}]}, 0x4, [{0x5c, &(0x7f00000019c0)=@string={0x5c, 0x3, "093fcd6b4c39e375e8dc10f2415dfb8ae27e28a083b5713358119ae44207d4fa24f602234e4177b50b5e7cb9209eec03b3d3fc67e04d8e7eff2e62d0c5e656fd9843519f4dffcf4e4625190838fd25a52fca9891bf2d4f02d5ef"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x4ff}}, {0xfe, &(0x7f0000001ac0)=@string={0xfe, 0x3, "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"}}]}) (async) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x20, 0x9, 0xb5, {0xb5, 0xa, "2e05f0dbbde30dc088bca0f26165bb090862954187d946b2dfc8e587e135731ee149b45e5e2d25c3f971a5c11cf40550fe58d07f9e46baa5631a9750f7a61e9c63c2f1578ff9df0c3a2bfde1a32a488965f6803613d3bd3d149f8a78a509475db72a842d013c654501f4ae13914bd2e2fae47a50d2b325eaca13eff8f3b059c0a852072ea2087690c659c6f5c706455759078942fa44bb837de9c36cfb2253e002772d4b0c8bb9e41a2fe840a0023cabdd6964"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000c00)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x56, 0x7f, 0x9, 0xfffb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "95afc5c54c0c6fae4a9de8ac6455e04c"}, @ssp_cap={0x20, 0x10, 0xa, 0x40, 0x5, 0x1000, 0xff00, 0x2, [0xc0, 0xc0, 0x180, 0x60, 0xa0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1f, 0x1f, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x6, 0x400}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x39, 0x5a, 0x4, "8ec721f7", "a7c04ab0"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9b, 0x2, 0x0, 0x1, 0x4c, 0xfbaf, 0x4}}}, &(0x7f0000001200)={0x84, &(0x7f0000000d40)={0x0, 0x18, 0xd2, "7abe087d7fda88af5c8fdf81eb7b8c04bd670a6818c8a87fdb61733bbe104bb6a266415037b68ecb645eecc834ddeead56216ca39e4eb3061040864bfb0f508ccb0328bc92a0cd52db8b2d3edde4926c6a8380c576022854879db69857169b7f2bb8253183b40ba25dd46758b09d2368e1ae12296d5f0d8e6c1cb3c3e08ac2fa47302d5b20d49d4bdaf342c6a80f2003f0bad0234911cb3964c8770ff098da925d32a08fb998d8cd115e6d78fe5705655072bd681974f8af02d8801be1c4ce9972351d902c06c44134b9ade5546beee3ce10"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x2, 0x80}}, &(0x7f0000000f40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "df86"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001080)={0x40, 0x17, 0x6}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "619a"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x3}}) 03:09:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6801, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x7000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 905.158967][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 905.175545][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 905.459468][T10944] usb 4-1: new high-speed USB device number 65 using dummy_hcd 03:09:36 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001000000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 905.881247][T10944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.892317][ T3694] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 905.904867][ T4843] usb 5-1: USB disconnect, device number 45 [ 905.907444][T10944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 905.945260][T10944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:09:36 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x20, 0x7, 0x5, {0x5, 0x2, "ebbb56"}}, &(0x7f0000000180)={0x0, 0x3, 0x3, @string={0x3, 0x3, "c9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f74000000050f7400060b1001080800070220001114100402d37c333d8bb990ea32a3ee70753c10516c4daa893883b277f32046e59033620b100100400009090300f83f1002cad6dbb2d8d23a848ff0dfcf20baf5341f9a319e9b37fe219e18cbba0def50cb5697c8f32386a9c6d6cd6c1cbb6910aa3f0ef6"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x0, 0x2, "7493b75b", "3decfedd"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x2, 0x1, 0x7, 0xe717, 0x8000}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0x3, 0xcc, "f45d919f6e04b884e9d5ecb5155af9e9c09e83836c29bff0156fb41cee68712c1cd2e1cf1a156a4bb87d7278256c9999a4292419fbe50d316ff2a70db9cf3992bd9f8f4b923df21e6f42bbfbe87654dd43574dd0074d9a06c17956d5d03153ea1610bc7f3328745d2b0896c9915a96ebbfd7c74414b3474d2b745f5edbf5a77c78091fb15079fd3b30945c58a1733eac7ccfaad399f4fecd40ebc1c6e15b24050209aca8da2c63ec1020ff33c4d15d5f6bf273a77c2f34f77cc154d4eaa896e5ed6868be20b0f814cc8c32dc"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5d}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xa0, 0x10, [0xf0f0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "f729"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "388c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) 03:09:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6803, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ffffff1f00000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 905.990542][T10944] usb 4-1: config 0 descriptor?? [ 906.001517][ T4843] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:36 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async, rerun: 32) syz_usb_disconnect(r0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x20, 0x7, 0x5, {0x5, 0x2, "ebbb56"}}, &(0x7f0000000180)={0x0, 0x3, 0x3, @string={0x3, 0x3, "c9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f74000000050f7400060b1001080800070220001114100402d37c333d8bb990ea32a3ee70753c10516c4daa893883b277f32046e59033620b100100400009090300f83f1002cad6dbb2d8d23a848ff0dfcf20baf5341f9a319e9b37fe219e18cbba0def50cb5697c8f32386a9c6d6cd6c1cbb6910aa3f0ef6"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x0, 0x2, "7493b75b", "3decfedd"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x2, 0x1, 0x7, 0xe717, 0x8000}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0x3, 0xcc, "f45d919f6e04b884e9d5ecb5155af9e9c09e83836c29bff0156fb41cee68712c1cd2e1cf1a156a4bb87d7278256c9999a4292419fbe50d316ff2a70db9cf3992bd9f8f4b923df21e6f42bbfbe87654dd43574dd0074d9a06c17956d5d03153ea1610bc7f3328745d2b0896c9915a96ebbfd7c74414b3474d2b745f5edbf5a77c78091fb15079fd3b30945c58a1733eac7ccfaad399f4fecd40ebc1c6e15b24050209aca8da2c63ec1020ff33c4d15d5f6bf273a77c2f34f77cc154d4eaa896e5ed6868be20b0f814cc8c32dc"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5d}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xa0, 0x10, [0xf0f0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "f729"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "388c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) [ 906.255534][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.264687][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.292996][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 03:09:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0xd5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x78, 0x8, 0x85}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1f, 0x46, 0x0, 0xff, 0x7}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0xfe, 0x101}]}, 0x8, [{0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="76038a00e113ecb0a298fbc55ff8836f2ce512460a4a83142393a763b4ed603ebc5a8ed17fb31b128206d0ee6ced108ca98fbf9ab23e8b3f663a76ace6d06ae57d08f52400dae34610c10eb1468c6ee43df6073518cc473dec56455f02417e47ea5641a233375e920f7721c8afe60000000000000000"]}, {0x102, &(0x7f00000002c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x1a, &(0x7f0000000400)=@string={0x1a, 0x3, "5493a816c1d48be489bf619d07fd591db25ed4a00f942438"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x848}}, {0xd1, &(0x7f0000000480)=@string={0xd1, 0x3, "1ef5435171a1008db4d95a3f3234ed081c405697e2e53a5803ca2b11ad8e64037d9724c9dac41de6d0d1a8a0ed08b8006083d57d9d2a1fff426a0138b56dc3acb9c88f5e770bd07b16865e3fac8f9b71bde01ab223f861be0a03a0ced7aec95ad0798fa60a3231143ab7d82129544ae010a86cd6ac5e9a132f9125d8a67c998af53d7b928b4471352c45f025a17d0f09e5562ffe6a7187a386706d7a2e39c90c2787a3ee21ab7d576cc3798065ba9f84623c3bef64277b047bf84292d13b12fa6cd4eab1a5d3a253f96b6d98d27375"}}, {0x68, &(0x7f0000000580)=@string={0x68, 0x3, "ccaa4f77297807856185830bff5018843ebe631fc273bace1fc2a8a4f6ca06c856c208d83d63c31fe3525520921d6dcd219ae969bd7e2b83eee66489d766e0999352f9f6e0570d919ec543642ae5f03c581db2de64023f70d755d6ff356d70e1e8c0258ff1bd"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00H'], 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000001e00)={0x2c, &(0x7f0000001c40)={0x20, 0xe, 0x94, {0x94, 0x23, "8e152bf983b7bbadc3a758e83a4389c96eb6ea77ba997a9cb8a0b20daa673d53cf6078751a5b68ba0287b49e41e3bf5cf01e2abcb5bb04f416fb0d1cd52196384eedb8874cb8d51e4eb47e64b57351ded84ae623785078db31126a370efc869b3575419282f428dbdea269970688535bfa9f0b65245d3b82205ad6d801c80dfe0cd65ee095a003b2f8780e01c97f2e4c5a90"}}, &(0x7f0000001d00)={0x0, 0x3, 0xd, @string={0xd, 0x3, "607db765552189009b31c7"}}, &(0x7f0000001d40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x1, 0x9, "4d1f89bd", "9dac81f2"}}, &(0x7f0000001dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x10, 0xba, 0x0, 0x1, 0xfff, 0x7f}}}, &(0x7f0000002280)={0x84, &(0x7f0000001e40)={0x40, 0xe, 0xab, "4b9059c13aaad32ab97472b3009d20ddee0be0622154333dc7c275e5032cd7f98c236828b99cd9e006527ca6b46c12d5b8006993fcf90a8154716dc4429ab8d7582ddb8377d887ac5b3ee947b1f119785be6a1f65bbbd0210dbe546b6e87de041f50f3c705be8e98ed131d0fe509e8cc0a04bcc03d8292030245ee7b221e97c3d9057238eeaf067430f3bc271445cf7769ac8739cdea21dad83e0b128c66654769b59837daa7af6b489e3e"}, &(0x7f0000001f00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001f40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001f80)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0xfffffffffffffffc, &(0x7f0000001fc0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000002000)={0x40, 0x9, 0x1, 0xd4}, &(0x7f0000002040)={0x40, 0xb, 0x2, "c292"}, &(0x7f0000002080)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000020c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002140)={0x40, 0x19, 0x2, "1cd4"}, &(0x7f0000002180)={0x40, 0x1a, 0x2, 0x37}, &(0x7f00000021c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002200)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002240)={0x40, 0x21, 0x1, 0x20}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, &(0x7f0000000680)={0x40, 0x9, 0xc6, {0xc6, 0xb, "d03d4ab5eb6612aa35663354dd71375d19eb0831f22bbc92d76111e7563be14fa0e0be1bc9b55f0de9b17fd6446bf3c759661f61bd82facd131c0b3876010830c474a8676c14878d53a5083f6ba42e01c63cc4e77f1d202772037970fcabf28e14010de2545f783a4d7fb5d32517eb02e176be71d5680988090de4fe2a172533053ea9ff91065abe838a4bbfe18127d79ae4fed1437da1c2423abbd6b28f04f8ace300f907746ba90f40b3c2a93b4410494bfe30a3b86a57605f7b5fe8a4a8bcb407d21f"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f00000007c0)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x7, "0ee9e61a"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_4={0x3, 0x0, 0x9, "3922890f"}, @main=@item_012={0x1, 0x0, 0xb, "c3"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0xd5d}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x20, 0xc, 0xc3, "f4ca79f05d796fdeaf9056dc9219cc131f0ca9a4fb5aa84e7940c12f88ff37de15f1fa8f3817473a13e07b5c8c1e20ab064dafd28b95ed380d7647b9a18d5ce06094f879e2d6e531bd2b7cba3ba2949e49a2288c180a3e8874dfa4ea6f79c5a5f8c794fa0cc6cded6f3fda912c907d51785850ee3f2cc64dedb2b2d816ef4ec540473bc65cfc2039c0a7a41cc7bd33fd6884ca16f219b7ebabac480efd08ac215a7baeb91f0c7030e36f63b9ce89d883e4492a2bc7b357eba4a3d251591759eec6c917"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x55, "946e006d026b2e9f090b6cbc1170734b0480f7a3e7dfb368a448c8239c860decf3179be99db2f95bb80e70c6599bfd09ffbb4550678650be82c402b6d2a891522641db544765a2dd9e92cec198e0a5c6c15cc366ea"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x8}}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x67f, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x19, 0xa4, 0x7a, 0x20, 0x11c9, 0xbf7c, 0x7f52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66d, 0x4, 0xd4, 0x7, 0x80, 0x80, [{{0x9, 0x4, 0xa3, 0xc9, 0x0, 0xff, 0x5d, 0x81, 0x1, [@generic={0x83, 0x23, "1bde71dece06bea7f48877f54116d87eb639693d2500be529d8073686ce6e9777eb1dc97765df6956c1f95b907eeb2fd09af027b46ca77ed87a311669258d74d8842dbbda3fd4a85cd96e286fa9c8aa0f2d9a69f53f8899ee8d46c280f8c1ea9631e1bb7fa85fe9a0c09a5edbb3dd5d03e9a79b79fa236cc5410f53cf85f1b698a"}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x3, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x23, 0x1}, @obex={0x5, 0x24, 0x15, 0x20}, @dmm={0x7, 0x24, 0x14, 0xff01, 0x5}, @acm={0x4, 0x24, 0x2, 0xf}]}]}}, {{0x9, 0x4, 0x96, 0x1, 0x1, 0xb7, 0xb5, 0x50, 0x63, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "c7ec8bdb54"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x81, 0x0, 0x73}, [@obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0xd7, 0x1f}, @mbim={0xc, 0x24, 0x1b, 0xaf, 0xa9, 0x3f, 0x7, 0x8, 0x2}, @acm={0x4}, @ncm={0x6, 0x24, 0x1a, 0x100, 0x2a}, @dmm={0x7, 0x24, 0x14, 0x5, 0x5}]}], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x12, 0x68, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}, @generic={0x35, 0x9, "0f3a88ef57ea3e573fcb233d9f94aa5933ae9d8b7e93a85eedd1afbc8dfcd208b606d2e11a71cc4e5c64618a64a5c3e24429cf"}]}}]}}, {{0x9, 0x4, 0x46, 0x1f, 0xe, 0x4c, 0x85, 0x66, 0x1f, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "5005dac7fa"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4, 0x7, 0x4}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0x58}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xff, 0xf9, 0x7f}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0xe, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x2, 0x1, 0x72, [@generic={0x67, 0x30, "3d89ea33575dcae70a5d05b88264ca2187d37f5ddf16352b4891ae3ce814093a1e21924d8f35abf8d244a0d170dccc0ebc8fa83cce58454ed4f5b90aad939ea23dbb9645724caaaedf0c00198c7bfc1b93b8d3b6d5b9cc967b583893597fbbbb972ef5c958"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3f, 0x2, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd2, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x20, 0x9, 0x2, [@generic={0xca, 0x24, "becf36d4482d1faf0e2891dcdd845503b388838c361b04409ef3b61f771dbe49c7558aceed4e5d4c577405a9772a699c3755014e853142e74147b8d7aaa026f5ee227da78ed29da37993d3e09ea919081db4aab05e5a5ece8fd7c87208884fbb6056e66ccee5bca2033160e8bf5e3d3ad20ad2704353f2b9aff4687763d4c230bcf6feb63cfc02ed207571caa4adfa05acc077edc6805022ad3ed7437b043fdcfc4a528a0b358c394c7b0f8a98478b889e4c6c3eec3a264f8371e412c675e0dd057044dad5e7e895"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x92, 0x7f, 0x8, [@generic={0xda, 0x24, "1998bbcea7928ec48e94ef77d7f08ef22b897d63a7b00fa4cbe1f1086d74f5673f316306893d70af9c3d52987546cdb258884a8b8a5cb6143be9c20cf7003ad53bf5f24700560b4bc4b37edcbc08732e812ee8c6fb61b9abfec38af393df82d9b9050bd555e56ba31a6f0617885002254d23b1b148b5131588ad15515c3bdfac86476144728667206c24b934681d3e536ffe53641f7f3b07c2e9128909b164f7dbb5c942560d6ddfb92e310072e17c524afb946da7d02ee4c04f7c92dac0778c87aa295e8a24c20835670ec85d4e1c455535c8c5777f94a6"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x3, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}, @generic={0x5, 0xa, "85082c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x4, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x22}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x6, 0x2a, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9b, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x64, 0x8, 0x0, [@generic={0x35, 0xc, "0fcfa98be99a07f4abf3c8069fbdbc89c2851a297cd7e36d16f74446c6c5399550ce269a88ef4f27a50c186a38439a73b66de7"}, @generic={0xb4, 0x2, "b0ce4b7c9653b0fde981441c7eb668d6efab9423ae2458d69df8035f801428b2e573c832d1be60d160881fcc1dae22ea57d58c9e36ea5e1d0255dd05540876f8b7ea99c3e51af4e89eb6b80db18cdfeaf2bd021752816046f2ce2ad1bf2dced4bae5af291dfb41f26be7313d93e7a8c882fca54f09a838ad4214dd483a094611f008479a9423b31ec2356b720cf56391732431b71f44c02a698fac3ef85c3a448361309bcb4ac48da9f1c19df55817a59e1b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x5e, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x2, 0x0, 0x5, [@generic={0xec, 0x0, "eda28cc58c5471fb2dadfdc01e4bc29b40abe1288d228f8779ae96c5917a3ccc3fb1eb5d3904d46be4a041fe194d2a7fad89df9f4d75eda82f41991caeeda6dd5494e226a17ffee0cba74af2eeebedf6f9470cb65723bf1023ce35087181f9bc80ae072b68d2d695e3f423df7c4d08fcb5ee3b86095171a8e4f2a7d04172eb97a17443192dd0ae4f7ce7b1cab086d6240ae94bd89c72c2ebebd08e5ac9c6ab2d18d1e209456cbbf0b0ea323f9d8a4d2fe5d944016ae2b8484cd43adf5fa54fc9da9d2b4b4fbc5835c8d3d001aceb91bce142f218adb509b08086843b21c8edb34f32793126d2fb6478a1"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0xff, 0x0, 0x3f}}]}}, {{0x9, 0x4, 0x60, 0x3f, 0x1, 0xdb, 0x78, 0x13, 0x6, [], [{{0x9, 0x5, 0x8c, 0x3, 0x200, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x8c}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4ffa}]}}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0x0, 0xff, 0x63, 0x20, 0x40}, 0x29, &(0x7f0000001980)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x9, 0xf00, 0x6, [0x0, 0x3f00, 0x3f30, 0x0, 0xff3fc0, 0xff0030]}]}, 0x4, [{0x5c, &(0x7f00000019c0)=@string={0x5c, 0x3, "093fcd6b4c39e375e8dc10f2415dfb8ae27e28a083b5713358119ae44207d4fa24f602234e4177b50b5e7cb9209eec03b3d3fc67e04d8e7eff2e62d0c5e656fd9843519f4dffcf4e4625190838fd25a52fca9891bf2d4f02d5ef"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x4ff}}, {0xfe, &(0x7f0000001ac0)=@string={0xfe, 0x3, "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"}}]}) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x20, 0x9, 0xb5, {0xb5, 0xa, "2e05f0dbbde30dc088bca0f26165bb090862954187d946b2dfc8e587e135731ee149b45e5e2d25c3f971a5c11cf40550fe58d07f9e46baa5631a9750f7a61e9c63c2f1578ff9df0c3a2bfde1a32a488965f6803613d3bd3d149f8a78a509475db72a842d013c654501f4ae13914bd2e2fae47a50d2b325eaca13eff8f3b059c0a852072ea2087690c659c6f5c706455759078942fa44bb837de9c36cfb2253e002772d4b0c8bb9e41a2fe840a0023cabdd6964"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000c00)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x56, 0x7f, 0x9, 0xfffb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "95afc5c54c0c6fae4a9de8ac6455e04c"}, @ssp_cap={0x20, 0x10, 0xa, 0x40, 0x5, 0x1000, 0xff00, 0x2, [0xc0, 0xc0, 0x180, 0x60, 0xa0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1f, 0x1f, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x6, 0x400}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x39, 0x5a, 0x4, "8ec721f7", "a7c04ab0"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9b, 0x2, 0x0, 0x1, 0x4c, 0xfbaf, 0x4}}}, &(0x7f0000001200)={0x84, &(0x7f0000000d40)={0x0, 0x18, 0xd2, "7abe087d7fda88af5c8fdf81eb7b8c04bd670a6818c8a87fdb61733bbe104bb6a266415037b68ecb645eecc834ddeead56216ca39e4eb3061040864bfb0f508ccb0328bc92a0cd52db8b2d3edde4926c6a8380c576022854879db69857169b7f2bb8253183b40ba25dd46758b09d2368e1ae12296d5f0d8e6c1cb3c3e08ac2fa47302d5b20d49d4bdaf342c6a80f2003f0bad0234911cb3964c8770ff098da925d32a08fb998d8cd115e6d78fe5705655072bd681974f8af02d8801be1c4ce9972351d902c06c44134b9ade5546beee3ce10"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x2, 0x80}}, &(0x7f0000000f40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "df86"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001080)={0x40, 0x17, 0x6}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "619a"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x3}}) 03:09:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x700c, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x9000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000003000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 906.301980][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.379543][T10944] usbhid 4-1:0.0: can't add hid device: -71 [ 906.392977][T10944] usbhid: probe of 4-1:0.0 failed with error -71 [ 906.394955][ T4843] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 906.434182][T10944] usb 4-1: USB disconnect, device number 65 [ 906.589377][ T3694] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 906.649440][ T4843] usb 5-1: Using ep0 maxpacket: 32 [ 906.799458][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 906.819444][T10944] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 906.829415][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 906.949502][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 906.989478][ T4843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 907.002028][ T4843] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 907.011091][ T4843] usb 5-1: Product: syz [ 907.015391][ T4843] usb 5-1: Manufacturer: syz [ 907.020286][ T4843] usb 5-1: SerialNumber: syz [ 907.034345][ T4843] usb 5-1: config 0 descriptor?? [ 907.085169][ T4843] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 907.103513][ T4843] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 907.119762][ T3694] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 907.129352][ T3694] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 907.138047][ T3694] usb 2-1: Product: syz [ 907.143772][ T3694] usb 2-1: Manufacturer: syz [ 907.148517][ T3694] usb 2-1: SerialNumber: syz [ 907.158506][ T3694] usb 2-1: config 0 descriptor?? [ 907.179794][T10944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.190869][T10944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 907.201775][ T3694] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 907.211221][T10944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.220420][ T3694] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 907.230626][T10944] usb 4-1: config 0 descriptor?? [ 907.407126][ T4840] usb 2-1: USB disconnect, device number 119 [ 907.414647][ T4840] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 907.691263][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.699996][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.769442][T10944] usbhid 4-1:0.0: can't add hid device: -71 [ 907.775478][T10944] usbhid: probe of 4-1:0.0 failed with error -71 [ 907.791390][T10944] usb 4-1: USB disconnect, device number 66 03:09:43 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xa000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x8100, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$rds(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6, &(0x7f00000017c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @cswp={0x58, 0x114, 0x7, {{0x5815, 0x2}, &(0x7f00000015c0)=0x10, &(0x7f0000001600), 0x3, 0x0, 0x8000, 0x6, 0x10, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x9}, &(0x7f0000001640)=0x2, &(0x7f0000001680)=0x2, 0xd, 0x0, 0x4, 0x6, 0x6, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x60, 0x7fff}, &(0x7f00000016c0)=0x6, &(0x7f0000001700)=0xff, 0x0, 0x7, 0x81, 0xfff, 0x2, 0x7fff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x186}, &(0x7f0000001740)=0x13ee, &(0x7f0000001780)=0x7, 0xf43e, 0x2c1c, 0x8000, 0x5, 0x41, 0x3f}}], 0x178, 0x20044001}, 0xc800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x1, 0x7, 0x7fffffff, 0x7}}) r2 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r2) 03:09:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x9b, {0x9b, 0x31, "95da1c19556f0749c0b5c26d8fc4fe0fefff9c96a81c8543fee444fee8149bd47f65f23e99b2e3f74bb0400118625cc907869fa26268c2a56fcee7e9d057d2a666f13d79ff7ddc8d26d73092c6d02112e7e3ca00d36b80a89556a20bb813272bc39ad91e3b65b86a179b901b014a20e9259d3c0fa6ae05aa6fe31d93baa0f4c2ade15ea7cbe32b4c5a83694c4bb915345b6f9667939a6a688e"}}, &(0x7f0000000240)={0x0, 0x3, 0x54, @string={0x54, 0x3, "a87d7cc5fcb9810c15ccf0e472e54b621c2249defaa12a0dff5b540a32c67c775ee3a851200ce9c73491b81b0518de0e42a16e9c9c28ebe9733569299d319790aa7d629ee5739052f100827e9b05f1c9efd6"}}, &(0x7f0000000140)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "d72a1634e36e901f20dd5fc32eb8da08"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "3ceccbbd1a0cb0e88921086bde027e74"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x35, 0x1, 0x20, 0x8, "ed04b969", "435cba0d"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x4, 0x0, 0x7, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x14, 0xd5, "2281d155633b0989dd7d3f763c48a03e0ed13f22a43678e2ace2aa05bb0ae22a442237a54ca69894de2ee9a096e7080ccd75c212ab6aeb3e3885c9e4adbf5cf4285893b720f47c126333735d4b1378f4b472f9a25b06aa8898cd3ead8fe57b1c4090e434d5a9e89ab1c883ebedbf53eea45c427d43e6fd8b4686f4ff864bb103f1a426eadc737f67478ebde25b206285bd1b7ac5352e190e7beb2274417c70690fef01102a0bb43cdfd27b13ed7b31adbb0120e07093d7bd5f797a5e8d77311655fe3a7b9acaee13e4aa67fe5a70051afe84d9771a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5215}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '\"E'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "a111"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x87}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 912.679501][T13158] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 912.709022][ T4840] usb 5-1: USB disconnect, device number 46 03:09:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000005000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 912.753505][T13172] __nla_validate_parse: 10 callbacks suppressed [ 912.753526][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 912.774511][ T4840] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 912.784818][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000006000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 912.833568][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 912.865758][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xb000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000007000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x9402, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000008000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 912.956003][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 912.967712][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 912.999143][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.017382][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.059361][ T3731] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 913.179369][ T4840] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 913.419420][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.430371][ T4840] usb 5-1: Using ep0 maxpacket: 32 [ 913.435558][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 913.445227][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.455903][ T3731] usb 4-1: config 0 descriptor?? [ 913.549543][ T4840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 913.729951][ T4840] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 913.739147][ T4840] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 913.748043][ T4840] usb 5-1: Product: syz [ 913.753997][ T4840] usb 5-1: Manufacturer: syz [ 913.758765][ T4840] usb 5-1: SerialNumber: syz [ 913.765626][ T4840] usb 5-1: config 0 descriptor?? [ 913.813773][ T4840] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 913.825561][ T4840] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 913.950575][ T3731] keytouch 0003:0926:3333.006C: fixing up Keytouch IEC report descriptor [ 913.961836][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006C/input/input134 [ 914.044734][ T3731] keytouch 0003:0926:3333.006C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 914.605490][T10944] usb 5-1: USB disconnect, device number 47 [ 914.620967][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:45 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000009000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xc000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf000, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$rds(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6, &(0x7f00000017c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @cswp={0x58, 0x114, 0x7, {{0x5815, 0x2}, &(0x7f00000015c0)=0x10, &(0x7f0000001600), 0x3, 0x0, 0x8000, 0x6, 0x10, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x9}, &(0x7f0000001640)=0x2, &(0x7f0000001680)=0x2, 0xd, 0x0, 0x4, 0x6, 0x6, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x60, 0x7fff}, &(0x7f00000016c0)=0x6, &(0x7f0000001700)=0xff, 0x0, 0x7, 0x81, 0xfff, 0x2, 0x7fff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x186}, &(0x7f0000001740)=0x13ee, &(0x7f0000001780)=0x7, 0xf43e, 0x2c1c, 0x8000, 0x5, 0x41, 0x3f}}], 0x178, 0x20044001}, 0xc800) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x1, 0x7, 0x7fffffff, 0x7}}) (async) r2 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r2) [ 915.168617][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 915.206995][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 915.499574][ T3669] usb 5-1: new high-speed USB device number 48 using dummy_hcd 03:09:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x9b, {0x9b, 0x31, "95da1c19556f0749c0b5c26d8fc4fe0fefff9c96a81c8543fee444fee8149bd47f65f23e99b2e3f74bb0400118625cc907869fa26268c2a56fcee7e9d057d2a666f13d79ff7ddc8d26d73092c6d02112e7e3ca00d36b80a89556a20bb813272bc39ad91e3b65b86a179b901b014a20e9259d3c0fa6ae05aa6fe31d93baa0f4c2ade15ea7cbe32b4c5a83694c4bb915345b6f9667939a6a688e"}}, &(0x7f0000000240)={0x0, 0x3, 0x54, @string={0x54, 0x3, "a87d7cc5fcb9810c15ccf0e472e54b621c2249defaa12a0dff5b540a32c67c775ee3a851200ce9c73491b81b0518de0e42a16e9c9c28ebe9733569299d319790aa7d629ee5739052f100827e9b05f1c9efd6"}}, &(0x7f0000000140)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "d72a1634e36e901f20dd5fc32eb8da08"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "3ceccbbd1a0cb0e88921086bde027e74"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x35, 0x1, 0x20, 0x8, "ed04b969", "435cba0d"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x4, 0x0, 0x7, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x14, 0xd5, "2281d155633b0989dd7d3f763c48a03e0ed13f22a43678e2ace2aa05bb0ae22a442237a54ca69894de2ee9a096e7080ccd75c212ab6aeb3e3885c9e4adbf5cf4285893b720f47c126333735d4b1378f4b472f9a25b06aa8898cd3ead8fe57b1c4090e434d5a9e89ab1c883ebedbf53eea45c427d43e6fd8b4686f4ff864bb103f1a426eadc737f67478ebde25b206285bd1b7ac5352e190e7beb2274417c70690fef01102a0bb43cdfd27b13ed7b31adbb0120e07093d7bd5f797a5e8d77311655fe3a7b9acaee13e4aa67fe5a70051afe84d9771a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5215}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '\"E'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "a111"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x87}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) (async, rerun: 32) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xe000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000a000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xffff, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 915.736912][ T3731] usb 4-1: USB disconnect, device number 67 [ 915.757995][ T3669] usb 5-1: Using ep0 maxpacket: 32 03:09:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000b000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000f000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) sendmsg$rds(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6, &(0x7f00000017c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @cswp={0x58, 0x114, 0x7, {{0x5815, 0x2}, &(0x7f00000015c0)=0x10, &(0x7f0000001600), 0x3, 0x0, 0x8000, 0x6, 0x10, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x9}, &(0x7f0000001640)=0x2, &(0x7f0000001680)=0x2, 0xd, 0x0, 0x4, 0x6, 0x6, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x60, 0x7fff}, &(0x7f00000016c0)=0x6, &(0x7f0000001700)=0xff, 0x0, 0x7, 0x81, 0xfff, 0x2, 0x7fff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x186}, &(0x7f0000001740)=0x13ee, &(0x7f0000001780)=0x7, 0xf43e, 0x2c1c, 0x8000, 0x5, 0x41, 0x3f}}], 0x178, 0x20044001}, 0xc800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x1, 0x7, 0x7fffffff, 0x7}}) r2 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) write$char_usb(r3, &(0x7f0000000080)="18", 0x1) read$char_usb(r3, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r2) [ 915.889756][ T3669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 916.079527][ T3669] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 916.088653][ T3669] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 916.102694][ T3669] usb 5-1: Product: syz [ 916.106944][ T3669] usb 5-1: Manufacturer: syz [ 916.112505][ T3669] usb 5-1: SerialNumber: syz [ 916.132828][ T3669] usb 5-1: config 0 descriptor?? [ 916.171398][ T3669] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 916.186339][ T3669] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 916.219422][ T3731] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 916.589481][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.600571][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 916.609740][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.629471][ T3731] usb 4-1: config 0 descriptor?? [ 916.961525][ T3669] usb 5-1: USB disconnect, device number 48 [ 916.969619][ T3731] usbhid 4-1:0.0: can't add hid device: -71 [ 916.975596][ T3731] usbhid: probe of 4-1:0.0 failed with error -71 [ 916.986774][ T3669] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 916.994797][ T3731] usb 4-1: USB disconnect, device number 68 03:09:47 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x10}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x4, 0x4, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5eb5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3e4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "f244"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000010000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:47 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008f44f1119a7896010902e8bb063d09"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:09:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x9b, {0x9b, 0x31, "95da1c19556f0749c0b5c26d8fc4fe0fefff9c96a81c8543fee444fee8149bd47f65f23e99b2e3f74bb0400118625cc907869fa26268c2a56fcee7e9d057d2a666f13d79ff7ddc8d26d73092c6d02112e7e3ca00d36b80a89556a20bb813272bc39ad91e3b65b86a179b901b014a20e9259d3c0fa6ae05aa6fe31d93baa0f4c2ade15ea7cbe32b4c5a83694c4bb915345b6f9667939a6a688e"}}, &(0x7f0000000240)={0x0, 0x3, 0x54, @string={0x54, 0x3, "a87d7cc5fcb9810c15ccf0e472e54b621c2249defaa12a0dff5b540a32c67c775ee3a851200ce9c73491b81b0518de0e42a16e9c9c28ebe9733569299d319790aa7d629ee5739052f100827e9b05f1c9efd6"}}, &(0x7f0000000140)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "d72a1634e36e901f20dd5fc32eb8da08"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "3ceccbbd1a0cb0e88921086bde027e74"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x35, 0x1, 0x20, 0x8, "ed04b969", "435cba0d"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x8, 0x4, 0x0, 0x7, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x14, 0xd5, "2281d155633b0989dd7d3f763c48a03e0ed13f22a43678e2ace2aa05bb0ae22a442237a54ca69894de2ee9a096e7080ccd75c212ab6aeb3e3885c9e4adbf5cf4285893b720f47c126333735d4b1378f4b472f9a25b06aa8898cd3ead8fe57b1c4090e434d5a9e89ab1c883ebedbf53eea45c427d43e6fd8b4686f4ff864bb103f1a426eadc737f67478ebde25b206285bd1b7ac5352e190e7beb2274417c70690fef01102a0bb43cdfd27b13ed7b31adbb0120e07093d7bd5f797a5e8d77311655fe3a7b9acaee13e4aa67fe5a70051afe84d9771a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5215}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '\"E'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "a111"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x87}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000011000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x10000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000f0000100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000030100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 917.761867][T13251] __nla_validate_parse: 14 callbacks suppressed [ 917.761889][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 917.780754][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 917.810503][ T3731] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 917.819623][ T3669] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 917.849900][ T3690] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 918.009570][ T3669] usb 2-1: device descriptor read/64, error 18 [ 918.109397][ T3690] usb 5-1: Using ep0 maxpacket: 32 [ 918.229890][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.240989][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 918.251429][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 918.262397][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.272557][ T3731] usb 4-1: config 0 descriptor?? [ 918.279555][ T3669] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 918.464239][ T3690] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 918.469464][ T3669] usb 2-1: device descriptor read/64, error 18 [ 918.473431][ T3690] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 918.488116][ T3690] usb 5-1: Product: syz [ 918.492864][ T3690] usb 5-1: Manufacturer: syz [ 918.497488][ T3690] usb 5-1: SerialNumber: syz [ 918.504003][ T3690] usb 5-1: config 0 descriptor?? [ 918.551162][ T3690] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 918.562107][ T3690] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 918.599643][ T3669] usb usb2-port1: attempt power cycle [ 918.649600][ T3731] usbhid 4-1:0.0: can't add hid device: -71 [ 918.655610][ T3731] usbhid: probe of 4-1:0.0 failed with error -71 [ 918.664591][ T3731] usb 4-1: USB disconnect, device number 69 [ 919.019427][ T3669] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 919.129509][ T3669] usb 2-1: Invalid ep0 maxpacket: 17 [ 919.289417][ T3669] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 919.343059][T10944] usb 5-1: USB disconnect, device number 49 [ 919.360551][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 919.399532][ T3669] usb 2-1: Invalid ep0 maxpacket: 17 [ 919.406164][ T3669] usb usb2-port1: unable to enumerate USB device 03:09:50 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x11000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000050100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 919.904002][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 919.914189][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 919.925159][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 919.952240][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 920.199415][ T3731] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 920.449529][ T3731] usb 5-1: Using ep0 maxpacket: 32 03:09:50 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008f44f1119a7896010902e8bb063d09"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008f44f1119a7896010902e8bb063d09"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) 03:09:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002c80), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}], 0x5, &(0x7f0000000700)=""/253, 0xfd}, 0x400}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/73, 0x49}, {}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000000a00)=""/64, 0x40}, {&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6, &(0x7f0000001c00)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003180)=""/145, 0x91}, {&(0x7f0000001d40)=""/84, 0x54}], 0x2, &(0x7f00000001c0)=""/38, 0x26}, 0x4}, {{0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=""/88, 0x58}, 0x4d}, {{&(0x7f0000001e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/253, 0xfd}, {&(0x7f0000003000)=""/53, 0x35}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/245, 0xf5}, {&(0x7f0000005880)=""/228, 0xe4}, {&(0x7f0000003280)=""/153, 0x99}, {&(0x7f0000003340)=""/47, 0x2f}], 0x8, &(0x7f0000003400)=""/61, 0x3d}}, {{&(0x7f0000003440)=@hci, 0x80, &(0x7f0000001c80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/78, 0x4e}, {&(0x7f0000004540)=""/52, 0x34}, {&(0x7f0000004580)=""/183, 0xb7}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x5}, 0x9d8}], 0x6, 0x40010060, &(0x7f0000005840)={0x77359400}) sendmmsg$unix(r3, &(0x7f0000002c80), 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYBLOB="e55113bd41dc1f9cfb1ec95062753a9400af1ed72e91a01717eb347a0e075acfec588c566d88385d6aea226b3c94765b3f9e73fd7729a8cb797406c07dbb433f0e846d136ca7dd62fed47c27", @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRES32=r3, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) syz_usb_ep_write(r5, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:09:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000060100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x2a030000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000070100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 920.545441][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.564461][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 920.579613][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 920.582052][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000090100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 920.634869][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 920.769936][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 920.779019][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 920.788426][ T3731] usb 5-1: Product: syz [ 920.793247][ T3731] usb 5-1: Manufacturer: syz [ 920.797878][ T3731] usb 5-1: SerialNumber: syz [ 920.819380][ T3731] usb 5-1: config 0 descriptor?? [ 920.851963][ T4843] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 920.871285][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 920.884972][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 921.029834][ T4840] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 921.059353][ T4843] usb 4-1: device descriptor read/64, error 18 [ 921.229346][ T4840] usb 2-1: device descriptor read/64, error 18 [ 921.339370][ T4843] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 921.499360][ T4840] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 921.532422][ T4843] usb 4-1: device descriptor read/64, error 18 [ 921.649643][ T4843] usb usb4-port1: attempt power cycle [ 921.664238][ T3669] usb 5-1: USB disconnect, device number 50 [ 921.680592][ T3669] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 921.709477][ T4840] usb 2-1: device descriptor read/64, error 18 [ 921.839622][ T4840] usb usb2-port1: attempt power cycle [ 922.069446][ T4843] usb 4-1: new high-speed USB device number 72 using dummy_hcd 03:09:52 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(0xffffffffffffffff, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000a0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x3f000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 922.249659][ T4843] usb 4-1: device descriptor read/8, error -61 [ 922.279520][ T4840] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 922.379717][ T4840] usb 2-1: Invalid ep0 maxpacket: 17 [ 922.529454][ T3669] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 922.529525][ T4843] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 922.546580][ T4840] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 922.651142][ T4840] usb 2-1: Invalid ep0 maxpacket: 17 [ 922.656991][ T4840] usb usb2-port1: unable to enumerate USB device [ 922.729698][ T4843] usb 4-1: device descriptor read/8, error -61 [ 922.769493][ T3669] usb 5-1: Using ep0 maxpacket: 32 [ 922.849660][ T4843] usb usb4-port1: unable to enumerate USB device [ 922.909477][ T3669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 923.079565][ T3669] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 923.088652][ T3669] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 923.097232][ T3669] usb 5-1: Product: syz [ 923.101469][ T3669] usb 5-1: Manufacturer: syz [ 923.106088][ T3669] usb 5-1: SerialNumber: syz [ 923.112809][ T3669] usb 5-1: config 0 descriptor?? [ 923.150903][ T3669] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 923.162265][ T3669] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:09:53 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008f44f1119a7896010902e8bb063d09"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) 03:09:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000b0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x596e3996, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002c80), 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}], 0x5, &(0x7f0000000700)=""/253, 0xfd}, 0x400}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/73, 0x49}, {}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000000a00)=""/64, 0x40}, {&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6, &(0x7f0000001c00)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003180)=""/145, 0x91}, {&(0x7f0000001d40)=""/84, 0x54}], 0x2, &(0x7f00000001c0)=""/38, 0x26}, 0x4}, {{0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=""/88, 0x58}, 0x4d}, {{&(0x7f0000001e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/253, 0xfd}, {&(0x7f0000003000)=""/53, 0x35}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/245, 0xf5}, {&(0x7f0000005880)=""/228, 0xe4}, {&(0x7f0000003280)=""/153, 0x99}, {&(0x7f0000003340)=""/47, 0x2f}], 0x8, &(0x7f0000003400)=""/61, 0x3d}}, {{&(0x7f0000003440)=@hci, 0x80, &(0x7f0000001c80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/78, 0x4e}, {&(0x7f0000004540)=""/52, 0x34}, {&(0x7f0000004580)=""/183, 0xb7}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x5}, 0x9d8}], 0x6, 0x40010060, &(0x7f0000005840)={0x77359400}) sendmmsg$unix(r3, &(0x7f0000002c80), 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYBLOB="e55113bd41dc1f9cfb1ec95062753a9400af1ed72e91a01717eb347a0e075acfec588c566d88385d6aea226b3c94765b3f9e73fd7729a8cb797406c07dbb433f0e846d136ca7dd62fed47c27", @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRES32=r3, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) (async) syz_usb_ep_write(r5, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 923.634854][T13296] __nla_validate_parse: 6 callbacks suppressed [ 923.634873][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000f0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 923.687181][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 923.705762][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000110100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:54 executing program 1: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x80}, 0x16, 0x3) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12960109021b0001000000000904000001c6cbe800090587030100"/41], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_control_io(r1, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x20, 0x23, 0x89, {0x89, 0xf, "f4853e4773c74ed0b8958457d559c2923fd815e9393a1ebd3b14cd68406b67ae08be1ae5861db5bcbdb97697c06cdbec7546db08d97891296e5bc707bfa0888a61d8d840610b6a7a44b6186a0534fb540f9f90cc772a2f44ed9048617054d1ac6b66abc6998fba46ad8b5f85833ff79baebe89783077496d988c4d682017f8a5ee3530a8478d53"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000a00)={0x0, 0xf, 0x166, {0x5, 0xf, 0x166, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x3f, 0x40, 0x0, 0xbc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x2, 0x9}, @generic={0x7c, 0x10, 0x2, "6fcc81b9fdc124b74db7d113a877e08f287573b60b407602d3ab9fa6072d3c522357da34bf356316dff2d4d3cea393a7939809facf776fbe97f00423bd6ba4fe0f90d5aefafd397957c2664a992c50820d006d2e06b89ebca60a3327c1fc7313b8061dc3fbe06bf8c6e16ffdaf2a2aa022aee3b5c48c7ac731"}, @generic={0xb5, 0x10, 0x1, "886918d98a0d5162b343a0c987b776aafbd61b686ffe50d06ae69f88306ff3ff22eabde589b857eb5e1eae351ac1e0a9324163fdb8c05ed4b30b8e45312c3972fec966850dc64ed490de29e2696c814a38c94791ffb81792b9954076abb2f1a655cdd80cc638098cee2a12446db04cc8420ec8bc5f2d0b823f4dc977492da7184f246539526f2634bfa1dffcfd37eb6a7a2efc66fde089a1a7414e93c38b4f181305776e59288c2c84452345479d8878ee47"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "82a76d06ee758d8c6f21b79cbd7422b2"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xee, 0x9, 0x4b, "77f35485", "6286f89f"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x6, 0x4b, 0x8, 0x400, 0x4}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x16, 0xa8, "c2fe479422d2301536193b4fbc34b8d2d23074e3efa3c24453f0b586fde6dd64742d1e9d8095811b3eae65a9641cf8f752bfc27601842a46e2a997c3aa97958afe8153538c448c8fcbb4ffc1b194d1e7d68362b31f98c3d0be74ae97ef9163959c9bd8378b1d0cf7b42111bbd445fe754ea078143d9eb090d5297ad3d02b474c076316c2afb9db913435e97700d4fa598a320022e290ecdb6dba15302f18251ef721581cd2b8ab4b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1022, 0x8}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "ff8e"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x127}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "6a18"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000900)=ANY=[@ANYBLOB="000f1c001a7c0000050f1c0002141004095337fa714c03853c579fcc25e17ffeef03100b"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0xe1, 0x82, "a74d70e8", "15855b55"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x63, 0x1, 0x52, 0xff, 0xb84, 0x5}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0xb, 0xce, "82c1091f110a06f0940ab83f39f61ca218a4031a391e3cd139d577bbf66285845dd247e8a99e3cbda42827a63be253f2390daa8ce0b6b8c1a02480b8c0dd95e32e790ab865346c53187e936123082a97ba77f4b9f812bf9aedb38ea624fcad4f06e34638b4b8b68a05b7bdad72de47b7d2f9fcf33e2732f36a033b6daae5861f58217906fce207d2e72a44ceb0580f105e0be2ae94791f255531f95a58f004b880c17e4eb4c08103253de01b3e9590afef73e752aa562a6c8b9b6fb396df13047b5c7f328d17d70b960ff1a8d3c5"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7c80"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "cbf0"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) syz_usb_disconnect(r1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000040)) [ 923.748519][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 923.912785][ T3669] usb 5-1: USB disconnect, device number 51 [ 923.921664][ T3669] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 924.030952][ T3731] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 924.169697][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 924.249627][ T3731] usb 4-1: device descriptor read/64, error 18 [ 924.359486][ T22] usb 2-1: device descriptor read/64, error 18 03:09:54 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(0xffffffffffffffff, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x60000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000003f0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000f00100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000004000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 924.460449][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 924.484608][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:09:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040000000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 924.519426][ T3731] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 924.528393][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.547243][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.609062][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 924.626299][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 924.652292][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 924.729397][ T3731] usb 4-1: device descriptor read/64, error 18 [ 924.749356][ T3669] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 924.849616][ T3731] usb usb4-port1: attempt power cycle [ 924.869354][ T22] usb 2-1: device descriptor read/64, error 18 [ 924.989527][ T22] usb usb2-port1: attempt power cycle [ 925.009364][ T3669] usb 5-1: Using ep0 maxpacket: 32 [ 925.134323][ T3669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 925.279349][ T3731] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 925.299435][ T3669] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 925.308623][ T3669] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 925.317397][ T3669] usb 5-1: Product: syz [ 925.321880][ T3669] usb 5-1: Manufacturer: syz [ 925.326649][ T3669] usb 5-1: SerialNumber: syz [ 925.340085][ T3669] usb 5-1: config 0 descriptor?? [ 925.383495][ T3669] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 925.404331][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 925.412031][ T3669] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 925.509479][ T3731] usb 4-1: device descriptor read/8, error -61 [ 925.589472][ T22] usb 2-1: device descriptor read/8, error -61 [ 925.779405][ T3731] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 925.869358][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 925.949418][ T3731] usb 4-1: device descriptor read/8, error -61 [ 926.049624][ T22] usb 2-1: device descriptor read/8, error -61 [ 926.069468][ T3731] usb usb4-port1: unable to enumerate USB device [ 926.173100][ T22] usb usb2-port1: unable to enumerate USB device 03:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x65580000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000020100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002c80), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}], 0x5, &(0x7f0000000700)=""/253, 0xfd}, 0x400}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/73, 0x49}, {}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000000a00)=""/64, 0x40}, {&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6, &(0x7f0000001c00)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003180)=""/145, 0x91}, {&(0x7f0000001d40)=""/84, 0x54}], 0x2, &(0x7f00000001c0)=""/38, 0x26}, 0x4}, {{0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=""/88, 0x58}, 0x4d}, {{&(0x7f0000001e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/253, 0xfd}, {&(0x7f0000003000)=""/53, 0x35}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/245, 0xf5}, {&(0x7f0000005880)=""/228, 0xe4}, {&(0x7f0000003280)=""/153, 0x99}, {&(0x7f0000003340)=""/47, 0x2f}], 0x8, &(0x7f0000003400)=""/61, 0x3d}}, {{&(0x7f0000003440)=@hci, 0x80, &(0x7f0000001c80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/78, 0x4e}, {&(0x7f0000004540)=""/52, 0x34}, {&(0x7f0000004580)=""/183, 0xb7}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x5}, 0x9d8}], 0x6, 0x40010060, &(0x7f0000005840)={0x77359400}) sendmmsg$unix(r3, &(0x7f0000002c80), 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYBLOB="e55113bd41dc1f9cfb1ec95062753a9400af1ed72e91a01717eb347a0e075acfec588c566d88385d6aea226b3c94765b3f9e73fd7729a8cb797406c07dbb433f0e846d136ca7dd62fed47c27", @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRES32=r3, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) syz_usb_ep_write(r5, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmmsg$unix(r0, &(0x7f0000002c80), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmmsg$unix(r2, &(0x7f0000002c80), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}], 0x5, &(0x7f0000000700)=""/253, 0xfd}, 0x400}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/73, 0x49}, {}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000000a00)=""/64, 0x40}, {&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6, &(0x7f0000001c00)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003180)=""/145, 0x91}, {&(0x7f0000001d40)=""/84, 0x54}], 0x2, &(0x7f00000001c0)=""/38, 0x26}, 0x4}, {{0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=""/88, 0x58}, 0x4d}, {{&(0x7f0000001e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/253, 0xfd}, {&(0x7f0000003000)=""/53, 0x35}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/245, 0xf5}, {&(0x7f0000005880)=""/228, 0xe4}, {&(0x7f0000003280)=""/153, 0x99}, {&(0x7f0000003340)=""/47, 0x2f}], 0x8, &(0x7f0000003400)=""/61, 0x3d}}, {{&(0x7f0000003440)=@hci, 0x80, &(0x7f0000001c80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/78, 0x4e}, {&(0x7f0000004540)=""/52, 0x34}, {&(0x7f0000004580)=""/183, 0xb7}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x5}, 0x9d8}], 0x6, 0x40010060, &(0x7f0000005840)={0x77359400}) (async) sendmmsg$unix(r3, &(0x7f0000002c80), 0x0, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYBLOB="e55113bd41dc1f9cfb1ec95062753a9400af1ed72e91a01717eb347a0e075acfec588c566d88385d6aea226b3c94765b3f9e73fd7729a8cb797406c07dbb433f0e846d136ca7dd62fed47c27", @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRES32=r3, @ANYRESOCT=r4], 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) (async) syz_usb_ep_write(r5, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:09:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 927.109445][ T22] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 927.299351][ T22] usb 4-1: device descriptor read/64, error 18 03:09:57 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(0xffffffffffffffff, r1) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:09:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000030100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:57 executing program 1: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x80}, 0x16, 0x3) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12960109021b0001000000000904000001c6cbe800090587030100"/41], 0x0) (async, rerun: 32) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_control_io(r1, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x20, 0x23, 0x89, {0x89, 0xf, "f4853e4773c74ed0b8958457d559c2923fd815e9393a1ebd3b14cd68406b67ae08be1ae5861db5bcbdb97697c06cdbec7546db08d97891296e5bc707bfa0888a61d8d840610b6a7a44b6186a0534fb540f9f90cc772a2f44ed9048617054d1ac6b66abc6998fba46ad8b5f85833ff79baebe89783077496d988c4d682017f8a5ee3530a8478d53"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000a00)={0x0, 0xf, 0x166, {0x5, 0xf, 0x166, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x3f, 0x40, 0x0, 0xbc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x2, 0x9}, @generic={0x7c, 0x10, 0x2, "6fcc81b9fdc124b74db7d113a877e08f287573b60b407602d3ab9fa6072d3c522357da34bf356316dff2d4d3cea393a7939809facf776fbe97f00423bd6ba4fe0f90d5aefafd397957c2664a992c50820d006d2e06b89ebca60a3327c1fc7313b8061dc3fbe06bf8c6e16ffdaf2a2aa022aee3b5c48c7ac731"}, @generic={0xb5, 0x10, 0x1, "886918d98a0d5162b343a0c987b776aafbd61b686ffe50d06ae69f88306ff3ff22eabde589b857eb5e1eae351ac1e0a9324163fdb8c05ed4b30b8e45312c3972fec966850dc64ed490de29e2696c814a38c94791ffb81792b9954076abb2f1a655cdd80cc638098cee2a12446db04cc8420ec8bc5f2d0b823f4dc977492da7184f246539526f2634bfa1dffcfd37eb6a7a2efc66fde089a1a7414e93c38b4f181305776e59288c2c84452345479d8878ee47"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "82a76d06ee758d8c6f21b79cbd7422b2"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xee, 0x9, 0x4b, "77f35485", "6286f89f"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x6, 0x4b, 0x8, 0x400, 0x4}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x16, 0xa8, "c2fe479422d2301536193b4fbc34b8d2d23074e3efa3c24453f0b586fde6dd64742d1e9d8095811b3eae65a9641cf8f752bfc27601842a46e2a997c3aa97958afe8153538c448c8fcbb4ffc1b194d1e7d68362b31f98c3d0be74ae97ef9163959c9bd8378b1d0cf7b42111bbd445fe754ea078143d9eb090d5297ad3d02b474c076316c2afb9db913435e97700d4fa598a320022e290ecdb6dba15302f18251ef721581cd2b8ab4b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1022, 0x8}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "ff8e"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x127}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "6a18"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="0010920000009211477354b1597c187cfc5ae0cddc07abe550bf2439fd1e909edd4703f851248642153e706d343186308cb3b12303075d38133e6e05ebbf79a48244a9f90a42a09b2f920a0a163a4e00c3bd80b77aad9371b0b25b6ae5ab35bc71badb2fb96e96721e3a2a8c6dcfca12bb29cbab5bfa2996bd187833d8e9cd2e222219c49a98356860c1be121c30cd3692002099ce13198ac2cc8152708739ab3feb633bc4e675e06ae3d635e58f44c188d2a35215efa1e809ed5ac91ba961260c1cfc35d91e8d92050d0e45074d59907a25f92058cd9c204f9ee3edd6a2e5363f42e2c316ea5f0ca521deb653b6e7bd487e3c8a574a907e51915a8a4893914f05"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000900)=ANY=[@ANYBLOB="000f1c001a7c0000050f1c0002141004095337fa714c03853c579fcc25e17ffeef03100b"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0xe1, 0x82, "a74d70e8", "15855b55"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x63, 0x1, 0x52, 0xff, 0xb84, 0x5}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0xb, 0xce, "82c1091f110a06f0940ab83f39f61ca218a4031a391e3cd139d577bbf66285845dd247e8a99e3cbda42827a63be253f2390daa8ce0b6b8c1a02480b8c0dd95e32e790ab865346c53187e936123082a97ba77f4b9f812bf9aedb38ea624fcad4f06e34638b4b8b68a05b7bdad72de47b7d2f9fcf33e2732f36a033b6daae5861f58217906fce207d2e72a44ceb0580f105e0be2ae94791f255531f95a58f004b880c17e4eb4c08103253de01b3e9590afef73e752aa562a6c8b9b6fb396df13047b5c7f328d17d70b960ff1a8d3c5"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7c80"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "cbf0"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_disconnect(r1) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000040)) 03:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x700c0000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:09:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 927.470199][ T3731] usb 5-1: USB disconnect, device number 52 [ 927.478238][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:09:57 executing program 1: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x80}, 0x16, 0x3) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12960109021b0001000000000904000001c6cbe800090587030100"/41], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_control_io(r1, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x20, 0x23, 0x89, {0x89, 0xf, "f4853e4773c74ed0b8958457d559c2923fd815e9393a1ebd3b14cd68406b67ae08be1ae5861db5bcbdb97697c06cdbec7546db08d97891296e5bc707bfa0888a61d8d840610b6a7a44b6186a0534fb540f9f90cc772a2f44ed9048617054d1ac6b66abc6998fba46ad8b5f85833ff79baebe89783077496d988c4d682017f8a5ee3530a8478d53"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000a00)={0x0, 0xf, 0x166, {0x5, 0xf, 0x166, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x3f, 0x40, 0x0, 0xbc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x2, 0x9}, @generic={0x7c, 0x10, 0x2, "6fcc81b9fdc124b74db7d113a877e08f287573b60b407602d3ab9fa6072d3c522357da34bf356316dff2d4d3cea393a7939809facf776fbe97f00423bd6ba4fe0f90d5aefafd397957c2664a992c50820d006d2e06b89ebca60a3327c1fc7313b8061dc3fbe06bf8c6e16ffdaf2a2aa022aee3b5c48c7ac731"}, @generic={0xb5, 0x10, 0x1, "886918d98a0d5162b343a0c987b776aafbd61b686ffe50d06ae69f88306ff3ff22eabde589b857eb5e1eae351ac1e0a9324163fdb8c05ed4b30b8e45312c3972fec966850dc64ed490de29e2696c814a38c94791ffb81792b9954076abb2f1a655cdd80cc638098cee2a12446db04cc8420ec8bc5f2d0b823f4dc977492da7184f246539526f2634bfa1dffcfd37eb6a7a2efc66fde089a1a7414e93c38b4f181305776e59288c2c84452345479d8878ee47"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "82a76d06ee758d8c6f21b79cbd7422b2"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xee, 0x9, 0x4b, "77f35485", "6286f89f"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x6, 0x4b, 0x8, 0x400, 0x4}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x16, 0xa8, "c2fe479422d2301536193b4fbc34b8d2d23074e3efa3c24453f0b586fde6dd64742d1e9d8095811b3eae65a9641cf8f752bfc27601842a46e2a997c3aa97958afe8153538c448c8fcbb4ffc1b194d1e7d68362b31f98c3d0be74ae97ef9163959c9bd8378b1d0cf7b42111bbd445fe754ea078143d9eb090d5297ad3d02b474c076316c2afb9db913435e97700d4fa598a320022e290ecdb6dba15302f18251ef721581cd2b8ab4b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1022, 0x8}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "ff8e"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x127}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "6a18"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000900)=ANY=[@ANYBLOB="000f1c001a7c0000050f1c0002141004095337fa714c03853c579fcc25e17ffeef03100b"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0xe1, 0x82, "a74d70e8", "15855b55"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x63, 0x1, 0x52, 0xff, 0xb84, 0x5}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0xb, 0xce, "82c1091f110a06f0940ab83f39f61ca218a4031a391e3cd139d577bbf66285845dd247e8a99e3cbda42827a63be253f2390daa8ce0b6b8c1a02480b8c0dd95e32e790ab865346c53187e936123082a97ba77f4b9f812bf9aedb38ea624fcad4f06e34638b4b8b68a05b7bdad72de47b7d2f9fcf33e2732f36a033b6daae5861f58217906fce207d2e72a44ceb0580f105e0be2ae94791f255531f95a58f004b880c17e4eb4c08103253de01b3e9590afef73e752aa562a6c8b9b6fb396df13047b5c7f328d17d70b960ff1a8d3c5"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7c80"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "cbf0"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) syz_usb_disconnect(r1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000040)) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x80}, 0x16, 0x3) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12960109021b0001000000000904000001c6cbe800090587030100"/41], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r2, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r2, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_control_io(r1, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x20, 0x23, 0x89, {0x89, 0xf, "f4853e4773c74ed0b8958457d559c2923fd815e9393a1ebd3b14cd68406b67ae08be1ae5861db5bcbdb97697c06cdbec7546db08d97891296e5bc707bfa0888a61d8d840610b6a7a44b6186a0534fb540f9f90cc772a2f44ed9048617054d1ac6b66abc6998fba46ad8b5f85833ff79baebe89783077496d988c4d682017f8a5ee3530a8478d53"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000a00)={0x0, 0xf, 0x166, {0x5, 0xf, 0x166, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x3f, 0x40, 0x0, 0xbc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x2, 0x9}, @generic={0x7c, 0x10, 0x2, "6fcc81b9fdc124b74db7d113a877e08f287573b60b407602d3ab9fa6072d3c522357da34bf356316dff2d4d3cea393a7939809facf776fbe97f00423bd6ba4fe0f90d5aefafd397957c2664a992c50820d006d2e06b89ebca60a3327c1fc7313b8061dc3fbe06bf8c6e16ffdaf2a2aa022aee3b5c48c7ac731"}, @generic={0xb5, 0x10, 0x1, "886918d98a0d5162b343a0c987b776aafbd61b686ffe50d06ae69f88306ff3ff22eabde589b857eb5e1eae351ac1e0a9324163fdb8c05ed4b30b8e45312c3972fec966850dc64ed490de29e2696c814a38c94791ffb81792b9954076abb2f1a655cdd80cc638098cee2a12446db04cc8420ec8bc5f2d0b823f4dc977492da7184f246539526f2634bfa1dffcfd37eb6a7a2efc66fde089a1a7414e93c38b4f181305776e59288c2c84452345479d8878ee47"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "82a76d06ee758d8c6f21b79cbd7422b2"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xee, 0x9, 0x4b, "77f35485", "6286f89f"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x6, 0x4b, 0x8, 0x400, 0x4}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x16, 0xa8, "c2fe479422d2301536193b4fbc34b8d2d23074e3efa3c24453f0b586fde6dd64742d1e9d8095811b3eae65a9641cf8f752bfc27601842a46e2a997c3aa97958afe8153538c448c8fcbb4ffc1b194d1e7d68362b31f98c3d0be74ae97ef9163959c9bd8378b1d0cf7b42111bbd445fe754ea078143d9eb090d5297ad3d02b474c076316c2afb9db913435e97700d4fa598a320022e290ecdb6dba15302f18251ef721581cd2b8ab4b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1022, 0x8}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "ff8e"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x127}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "6a18"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000900)=ANY=[@ANYBLOB="000f1c001a7c0000050f1c0002141004095337fa714c03853c579fcc25e17ffeef03100b"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0xe1, 0x82, "a74d70e8", "15855b55"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x63, 0x1, 0x52, 0xff, 0xb84, 0x5}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0xb, 0xce, "82c1091f110a06f0940ab83f39f61ca218a4031a391e3cd139d577bbf66285845dd247e8a99e3cbda42827a63be253f2390daa8ce0b6b8c1a02480b8c0dd95e32e790ab865346c53187e936123082a97ba77f4b9f812bf9aedb38ea624fcad4f06e34638b4b8b68a05b7bdad72de47b7d2f9fcf33e2732f36a033b6daae5861f58217906fce207d2e72a44ceb0580f105e0be2ae94791f255531f95a58f004b880c17e4eb4c08103253de01b3e9590afef73e752aa562a6c8b9b6fb396df13047b5c7f328d17d70b960ff1a8d3c5"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7c80"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "cbf0"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_disconnect(r1) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000040)) (async) 03:09:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 927.569416][ T22] usb 4-1: new high-speed USB device number 79 using dummy_hcd 03:09:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 927.759606][ T22] usb 4-1: device descriptor read/64, error 18 [ 927.882249][ T22] usb usb4-port1: attempt power cycle [ 927.959539][ T3731] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 928.029362][T10944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 928.219398][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 928.219435][T10944] usb 2-1: device descriptor read/64, error 18 [ 928.309458][ T22] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 928.349576][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 928.479558][ T22] usb 4-1: device descriptor read/8, error -61 [ 928.499432][T10944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 928.539761][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 928.549002][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 928.557615][ T3731] usb 5-1: Product: syz [ 928.562268][ T3731] usb 5-1: Manufacturer: syz [ 928.566862][ T3731] usb 5-1: SerialNumber: syz [ 928.576108][ T3731] usb 5-1: config 0 descriptor?? [ 928.621389][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 928.632562][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 928.689431][T10944] usb 2-1: device descriptor read/64, error 18 [ 928.749367][ T22] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 928.815624][T10944] usb usb2-port1: attempt power cycle [ 928.919576][ T22] usb 4-1: device descriptor read/8, error -61 [ 929.051126][ T22] usb usb4-port1: unable to enumerate USB device [ 929.229436][T10944] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 929.409700][T10944] usb 2-1: device descriptor read/8, error -61 03:10:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000050100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 929.679369][T10944] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 929.756983][T13369] __nla_validate_parse: 12 callbacks suppressed [ 929.757004][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 929.774113][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 929.785472][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 929.808823][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 929.889713][T10944] usb 2-1: device descriptor read/8, error -61 [ 930.023793][T10944] usb usb2-port1: unable to enumerate USB device 03:10:00 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, 0xffffffffffffffff) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:10:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000060100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x20, 0xc, 0x4c, {0x4c, 0x0, "262ff73f9c14915bd7782eb3306d81859cbff160c8afd9ddeff496788a3f8e1361eb58d037294327301020f4b999034fff2ba9fcb47c06e0b51769704fb4b4ba1ae19e5a6bd18b39c6fd"}}, &(0x7f0000000600)={0x0, 0x3, 0x50, @string={0x50, 0x3, "3d57d0d3105e9bb785d3c40b44dab2fa88f1d18a228871f942f70bd73e14039b5e5ee527bb9c005ff2958021bcfc9218622c95fcc121c235d6af9584cec84b1d08386f583e2d2ffffee23429a0c3"}}, &(0x7f0000000680)={0x0, 0x22, 0x17, {[@main=@item_012={0x2, 0x0, 0x8, '*E'}, @main=@item_4={0x3, 0x0, 0xf, "18461cda"}, @global=@item_012={0x2, 0x1, 0xb, "b84d"}, @global=@item_012={0x1, 0x1, 0x7, "ef"}, @global=@item_4={0x3, 0x1, 0x0, "6c3236d3"}, @local=@item_4={0x3, 0x2, 0x1, "36498395"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x81, 0x1, {0x22, 0x89f}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0xd, 0x2c, "23481829f72fa162c7b5cd65cd893fe20b7bedc8a97ae0ca68622e90c53e02b4f1b1bfc40a9acb60cd074e5c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2c}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000800)={0x20, 0x1, 0x54, "0fea278a84e5c259719a4bf7c5fe43ac70c720fc709de8cfbdee6883e25b1881929bc2008fcba708a442176eb9d5181c049ed33b2ef3f95caa111713a65a7d3cfa2c7543e5631485f2d07c1e29518eed3e524e79"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4f}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x1, 0x1f, {0x9, 0x21, 0x1ff, 0x8, 0x1, {0x22, 0xbd8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x59, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x83, 0x9, 0x1, 0x20}, 0x35, &(0x7f0000000980)={0x5, 0xf, 0x35, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "197016eb2ec6f0426b1f7b03a32bd415"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x400, 0xf, 0x0, [0xfe8000, 0xc030, 0x0, 0xff3f00]}]}, 0x1, [{0xea, &(0x7f00000009c0)=@string={0xea, 0x3, "94caff86a2811a9959b6dbc1f9dc4b16de0fdd7001c66cc6b62ebff2afb099e1cec425802037d21bb009862863efa5bcbb5a181fefaf375037af09daf8d1dd4931a427b32f2a29d0501fcd4ab8b2f7ee6710575fe071a4e26f807280aa884f296a4783a8b958592a91d46b133b277716691c79c9a57f80e5ee732ad68f080189e0258b5bb6da9540c5a67608808d2d896a546c4a051bcd4eed1902b67c493816fe5617d71c37e16e910777e99d7973c3e4f66b0e157ec983723beebddaaa7666bb41e90b55f3fae52705332ad977974b94d4e7057f82d62166fe3395900b446f638a49e79bae7aac"}}]}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x60, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xd69}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x45, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x2, 0x20}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x1, 0x10, 0x80}, 0x22, &(0x7f0000000b80)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x74, 0x9, 0x40, 0x8000, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x4, 0xfff7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xac, 0x9, 0x1, 0x3, 0x2e}]}, 0x2, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000dc0)={0x24, &(0x7f0000000c80)={0x40, 0x7, 0x5d, {0x5d, 0x12, "31a2a2752d8a8d31dd09d27c8e38d3e75d7d451d278b723f2be7f58a15cbd0170fc6f34cafebf2ecfe24ed15279eb7465272964be7d916026f3f4a74d49d82741933db7f0856b0ae5898a0b2ba53de2397d455029c9908ae3ecf89"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@global, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x0, 0x1, 0xe}, @local=@item_012={0x1, 0x2, 0x0, "96"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xe8, 0x1, {0x22, 0xbb3}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000e00)={0x0, 0x18, 0xb8, "13f7fa09184991fda11831f187ba2694517217276b237c1989ba85e25ab8fd79cbade57587c22a8f4b6a2125f9f83be9bcf82262e58cee609d73f8f5649e699bc088e668cc18c99551a5c53c104fbdbdd66ba5f93a5c2c9b6b3555087ed826cba2d75df7fa99ee68bc11ad801d4e755ca43b7d516b3675086ae106a62c649203438c57b800fcb332625bec6555261ac3f0ad012b92fac122e4d08d0e240914904c8fdac48c1f9960caf964dfaa569a7d59d88bdeae6ffe38"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x1, 0x75, "a55fd99fa7c9c11c66749ae68706dc7a8b64c2a094b966631de9b027e7d99e5a543c9039726b47173fb50404d5c7a3deb38ebd16d6a80bae9da7a1ffdec45ffb4b1801feb6d8becb04fb0210dcc1e6bf9a3d9f2b0eefd0ff01d721deec2d41e436ba432d9d9b9dec872c336b3736886fde7f91cc42"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0xed2f85e54c34657e, 0x23, 0xf2, {0xf2, 0x1, "13473d39a8ae2172dce9ec7a013c100b19f5712bca12706100738aec3026d424304d34a6462df6579afb4616097bbb0683d00da12fefd9b5c6760e15a5f48751899d76616ab89c1dbdcbd7ec51c56f91a9b1b6c76637909c7ed130435aff954619aba13f7adf5d1d4d14adcb095b2d86c1af48d0632a059b8d9ecac6de8522470f4cf9d47f50c1109c9464da87231c1c423731a45ddb1ca977098b2237bd6e0db102b09e6aa97c075afbf121df82e6b67d2fdef63ce210064d3de4b65af99e6ef71473a0df14117ef5479388c25be58109468a56d694abdad9a89158fe92852bb391008db0d2b7e075c2441e2b68e0a7"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="0003b2000080b203a9e12f5d445682026056bfc8ec9d0c6477764688b38a09f6fd3488a4c43a12ad9faf3aa1c910ba97b742589db875f65dfdd2a3c33240db334749a85bca78d5205a5473ee65a3c41b21e70b5fd4fda83eff0fc6943013a5bfccb68aff7859a76d000000000000007fd87557d0945ff4d413bab3d9b47cf17bebaca4a17e7d01614491a5e308367253f9e0d45ce839454dfbfe6a75dc07b7701ac125400f8942ef54da1a0365457fda8101001b0ebae2c5"], &(0x7f00000001c0)={0x0, 0x22, 0x13, {[@main=@item_012={0x1, 0x0, 0x8, "9d"}, @main=@item_012={0x1, 0x0, 0xc, 'z'}, @main=@item_012={0x1, 0x0, 0x5, "ba"}, @main=@item_4={0x3, 0x0, 0xb, "6599425c"}, @main=@item_012={0x2, 0x0, 0x5, 'S_'}, @main=@item_012={0x2, 0x0, 0xc, "8921"}, @local=@item_012={0x1, 0x2, 0x2, "8d"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x40, 0x1, {0x22, 0xc1a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x11, 0x50, "5821334102651a6cbf7e068241e287ba89b4a525c95a30d5b405c0a75b6cae60a745f8b61398996f2340b9b85721949e6e945080f70c83cad23cb20156ee7cb1feaece99ec8fe38e4d42c02a064574bb"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x1, 0x52, "1e3fed0fff64a46a89693527b0c4e084f1adabf76b4bc3b770f4fba083034bb26d53c68aa063937be2030dfc4dbf836c7d0aea7be756dc3e8607e3fe92fdb7f436843b6ef1ec501626ebe1340094f8844fef"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x14}}) 03:10:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x96396e59, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 930.573266][T10944] usb 5-1: USB disconnect, device number 53 [ 930.605733][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:10:00 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) read$char_usb(r1, &(0x7f0000000180)=""/197, 0xc5) 03:10:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000070100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 930.623261][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 930.661574][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 930.686452][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:10:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000080100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 930.727104][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x11}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000090100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000a0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 930.826631][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 930.837211][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 930.859501][ T14] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 931.089561][T10944] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 931.099549][ T3731] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 931.213026][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.219639][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.229698][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.241069][ T14] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 931.250819][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.263659][ T14] usb 4-1: config 0 descriptor?? [ 931.339770][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 931.389435][ T3731] usb 2-1: Using ep0 maxpacket: 32 [ 931.459670][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 931.505287][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.514446][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.522531][ T3731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 931.629585][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 931.643478][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 931.652022][T10944] usb 5-1: Product: syz [ 931.656191][T10944] usb 5-1: Manufacturer: syz [ 931.665269][T10944] usb 5-1: SerialNumber: syz [ 931.680911][T10944] usb 5-1: config 0 descriptor?? [ 931.699613][ T3731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 931.708810][ T3731] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 931.717665][ T3731] usb 2-1: Product: syz [ 931.722390][ T3731] usb 2-1: Manufacturer: syz [ 931.724380][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 931.727160][ T3731] usb 2-1: SerialNumber: syz [ 931.753569][T10944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 931.754817][ T3731] usb 2-1: config 0 descriptor?? [ 931.768468][ T14] keytouch 0003:0926:3333.006D: fixing up Keytouch IEC report descriptor [ 931.780410][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006D/input/input135 [ 931.811077][ T3731] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 931.821933][ T3731] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 931.877611][ T14] keytouch 0003:0926:3333.006D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 931.968217][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.978858][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.102155][ T14] usb 2-1: USB disconnect, device number 10 [ 932.110325][ T14] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 933.601215][T10944] usb 4-1: USB disconnect, device number 82 03:10:03 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, 0xffffffffffffffff) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:10:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000b0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x23}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x20, 0xc, 0x4c, {0x4c, 0x0, "262ff73f9c14915bd7782eb3306d81859cbff160c8afd9ddeff496788a3f8e1361eb58d037294327301020f4b999034fff2ba9fcb47c06e0b51769704fb4b4ba1ae19e5a6bd18b39c6fd"}}, &(0x7f0000000600)={0x0, 0x3, 0x50, @string={0x50, 0x3, "3d57d0d3105e9bb785d3c40b44dab2fa88f1d18a228871f942f70bd73e14039b5e5ee527bb9c005ff2958021bcfc9218622c95fcc121c235d6af9584cec84b1d08386f583e2d2ffffee23429a0c3"}}, &(0x7f0000000680)={0x0, 0x22, 0x17, {[@main=@item_012={0x2, 0x0, 0x8, '*E'}, @main=@item_4={0x3, 0x0, 0xf, "18461cda"}, @global=@item_012={0x2, 0x1, 0xb, "b84d"}, @global=@item_012={0x1, 0x1, 0x7, "ef"}, @global=@item_4={0x3, 0x1, 0x0, "6c3236d3"}, @local=@item_4={0x3, 0x2, 0x1, "36498395"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x81, 0x1, {0x22, 0x89f}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0xd, 0x2c, "23481829f72fa162c7b5cd65cd893fe20b7bedc8a97ae0ca68622e90c53e02b4f1b1bfc40a9acb60cd074e5c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2c}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000800)={0x20, 0x1, 0x54, "0fea278a84e5c259719a4bf7c5fe43ac70c720fc709de8cfbdee6883e25b1881929bc2008fcba708a442176eb9d5181c049ed33b2ef3f95caa111713a65a7d3cfa2c7543e5631485f2d07c1e29518eed3e524e79"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4f}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x1, 0x1f, {0x9, 0x21, 0x1ff, 0x8, 0x1, {0x22, 0xbd8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x59, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x83, 0x9, 0x1, 0x20}, 0x35, &(0x7f0000000980)={0x5, 0xf, 0x35, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "197016eb2ec6f0426b1f7b03a32bd415"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x400, 0xf, 0x0, [0xfe8000, 0xc030, 0x0, 0xff3f00]}]}, 0x1, [{0xea, &(0x7f00000009c0)=@string={0xea, 0x3, "94caff86a2811a9959b6dbc1f9dc4b16de0fdd7001c66cc6b62ebff2afb099e1cec425802037d21bb009862863efa5bcbb5a181fefaf375037af09daf8d1dd4931a427b32f2a29d0501fcd4ab8b2f7ee6710575fe071a4e26f807280aa884f296a4783a8b958592a91d46b133b277716691c79c9a57f80e5ee732ad68f080189e0258b5bb6da9540c5a67608808d2d896a546c4a051bcd4eed1902b67c493816fe5617d71c37e16e910777e99d7973c3e4f66b0e157ec983723beebddaaa7666bb41e90b55f3fae52705332ad977974b94d4e7057f82d62166fe3395900b446f638a49e79bae7aac"}}]}) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x60, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xd69}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x45, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x2, 0x20}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x1, 0x10, 0x80}, 0x22, &(0x7f0000000b80)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x74, 0x9, 0x40, 0x8000, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x4, 0xfff7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xac, 0x9, 0x1, 0x3, 0x2e}]}, 0x2, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000dc0)={0x24, &(0x7f0000000c80)={0x40, 0x7, 0x5d, {0x5d, 0x12, "31a2a2752d8a8d31dd09d27c8e38d3e75d7d451d278b723f2be7f58a15cbd0170fc6f34cafebf2ecfe24ed15279eb7465272964be7d916026f3f4a74d49d82741933db7f0856b0ae5898a0b2ba53de2397d455029c9908ae3ecf89"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@global, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x0, 0x1, 0xe}, @local=@item_012={0x1, 0x2, 0x0, "96"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xe8, 0x1, {0x22, 0xbb3}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000e00)={0x0, 0x18, 0xb8, "13f7fa09184991fda11831f187ba2694517217276b237c1989ba85e25ab8fd79cbade57587c22a8f4b6a2125f9f83be9bcf82262e58cee609d73f8f5649e699bc088e668cc18c99551a5c53c104fbdbdd66ba5f93a5c2c9b6b3555087ed826cba2d75df7fa99ee68bc11ad801d4e755ca43b7d516b3675086ae106a62c649203438c57b800fcb332625bec6555261ac3f0ad012b92fac122e4d08d0e240914904c8fdac48c1f9960caf964dfaa569a7d59d88bdeae6ffe38"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x1, 0x75, "a55fd99fa7c9c11c66749ae68706dc7a8b64c2a094b966631de9b027e7d99e5a543c9039726b47173fb50404d5c7a3deb38ebd16d6a80bae9da7a1ffdec45ffb4b1801feb6d8becb04fb0210dcc1e6bf9a3d9f2b0eefd0ff01d721deec2d41e436ba432d9d9b9dec872c336b3736886fde7f91cc42"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0xed2f85e54c34657e, 0x23, 0xf2, {0xf2, 0x1, "13473d39a8ae2172dce9ec7a013c100b19f5712bca12706100738aec3026d424304d34a6462df6579afb4616097bbb0683d00da12fefd9b5c6760e15a5f48751899d76616ab89c1dbdcbd7ec51c56f91a9b1b6c76637909c7ed130435aff954619aba13f7adf5d1d4d14adcb095b2d86c1af48d0632a059b8d9ecac6de8522470f4cf9d47f50c1109c9464da87231c1c423731a45ddb1ca977098b2237bd6e0db102b09e6aa97c075afbf121df82e6b67d2fdef63ce210064d3de4b65af99e6ef71473a0df14117ef5479388c25be58109468a56d694abdad9a89158fe92852bb391008db0d2b7e075c2441e2b68e0a7"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="0003b2000080b203a9e12f5d445682026056bfc8ec9d0c6477764688b38a09f6fd3488a4c43a12ad9faf3aa1c910ba97b742589db875f65dfdd2a3c33240db334749a85bca78d5205a5473ee65a3c41b21e70b5fd4fda83eff0fc6943013a5bfccb68aff7859a76d000000000000007fd87557d0945ff4d413bab3d9b47cf17bebaca4a17e7d01614491a5e308367253f9e0d45ce839454dfbfe6a75dc07b7701ac125400f8942ef54da1a0365457fda8101001b0ebae2c5"], &(0x7f00000001c0)={0x0, 0x22, 0x13, {[@main=@item_012={0x1, 0x0, 0x8, "9d"}, @main=@item_012={0x1, 0x0, 0xc, 'z'}, @main=@item_012={0x1, 0x0, 0x5, "ba"}, @main=@item_4={0x3, 0x0, 0xb, "6599425c"}, @main=@item_012={0x2, 0x0, 0x5, 'S_'}, @main=@item_012={0x2, 0x0, 0xc, "8921"}, @local=@item_012={0x1, 0x2, 0x2, "8d"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x40, 0x1, {0x22, 0xc1a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x11, 0x50, "5821334102651a6cbf7e068241e287ba89b4a525c95a30d5b405c0a75b6cae60a745f8b61398996f2340b9b85721949e6e945080f70c83cad23cb20156ee7cb1feaece99ec8fe38e4d42c02a064574bb"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x1, 0x52, "1e3fed0fff64a46a89693527b0c4e084f1adabf76b4bc3b770f4fba083034bb26d53c68aa063937be2030dfc4dbf836c7d0aea7be756dc3e8607e3fe92fdb7f436843b6ef1ec501626ebe1340094f8844fef"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x14}}) 03:10:04 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async, rerun: 32) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) (async) read$char_usb(r1, &(0x7f0000000180)=""/197, 0xc5) [ 933.647001][ T3731] usb 5-1: USB disconnect, device number 54 [ 933.677340][ T3731] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:10:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000f0100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 933.717733][T13405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.755495][T13405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:10:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x60}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x20, 0xc, 0x4c, {0x4c, 0x0, "262ff73f9c14915bd7782eb3306d81859cbff160c8afd9ddeff496788a3f8e1361eb58d037294327301020f4b999034fff2ba9fcb47c06e0b51769704fb4b4ba1ae19e5a6bd18b39c6fd"}}, &(0x7f0000000600)={0x0, 0x3, 0x50, @string={0x50, 0x3, "3d57d0d3105e9bb785d3c40b44dab2fa88f1d18a228871f942f70bd73e14039b5e5ee527bb9c005ff2958021bcfc9218622c95fcc121c235d6af9584cec84b1d08386f583e2d2ffffee23429a0c3"}}, &(0x7f0000000680)={0x0, 0x22, 0x17, {[@main=@item_012={0x2, 0x0, 0x8, '*E'}, @main=@item_4={0x3, 0x0, 0xf, "18461cda"}, @global=@item_012={0x2, 0x1, 0xb, "b84d"}, @global=@item_012={0x1, 0x1, 0x7, "ef"}, @global=@item_4={0x3, 0x1, 0x0, "6c3236d3"}, @local=@item_4={0x3, 0x2, 0x1, "36498395"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x81, 0x1, {0x22, 0x89f}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0xd, 0x2c, "23481829f72fa162c7b5cd65cd893fe20b7bedc8a97ae0ca68622e90c53e02b4f1b1bfc40a9acb60cd074e5c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2c}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000800)={0x20, 0x1, 0x54, "0fea278a84e5c259719a4bf7c5fe43ac70c720fc709de8cfbdee6883e25b1881929bc2008fcba708a442176eb9d5181c049ed33b2ef3f95caa111713a65a7d3cfa2c7543e5631485f2d07c1e29518eed3e524e79"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4f}}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x1, 0x1f, {0x9, 0x21, 0x1ff, 0x8, 0x1, {0x22, 0xbd8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x59, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x83, 0x9, 0x1, 0x20}, 0x35, &(0x7f0000000980)={0x5, 0xf, 0x35, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "197016eb2ec6f0426b1f7b03a32bd415"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x400, 0xf, 0x0, [0xfe8000, 0xc030, 0x0, 0xff3f00]}]}, 0x1, [{0xea, &(0x7f00000009c0)=@string={0xea, 0x3, "94caff86a2811a9959b6dbc1f9dc4b16de0fdd7001c66cc6b62ebff2afb099e1cec425802037d21bb009862863efa5bcbb5a181fefaf375037af09daf8d1dd4931a427b32f2a29d0501fcd4ab8b2f7ee6710575fe071a4e26f807280aa884f296a4783a8b958592a91d46b133b277716691c79c9a57f80e5ee732ad68f080189e0258b5bb6da9540c5a67608808d2d896a546c4a051bcd4eed1902b67c493816fe5617d71c37e16e910777e99d7973c3e4f66b0e157ec983723beebddaaa7666bb41e90b55f3fae52705332ad977974b94d4e7057f82d62166fe3395900b446f638a49e79bae7aac"}}]}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x60, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xd69}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x45, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x2, 0x20}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x1, 0x10, 0x80}, 0x22, &(0x7f0000000b80)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x74, 0x9, 0x40, 0x8000, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x4, 0xfff7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xac, 0x9, 0x1, 0x3, 0x2e}]}, 0x2, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000dc0)={0x24, &(0x7f0000000c80)={0x40, 0x7, 0x5d, {0x5d, 0x12, "31a2a2752d8a8d31dd09d27c8e38d3e75d7d451d278b723f2be7f58a15cbd0170fc6f34cafebf2ecfe24ed15279eb7465272964be7d916026f3f4a74d49d82741933db7f0856b0ae5898a0b2ba53de2397d455029c9908ae3ecf89"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@global, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x0, 0x1, 0xe}, @local=@item_012={0x1, 0x2, 0x0, "96"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xe8, 0x1, {0x22, 0xbb3}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000e00)={0x0, 0x18, 0xb8, "13f7fa09184991fda11831f187ba2694517217276b237c1989ba85e25ab8fd79cbade57587c22a8f4b6a2125f9f83be9bcf82262e58cee609d73f8f5649e699bc088e668cc18c99551a5c53c104fbdbdd66ba5f93a5c2c9b6b3555087ed826cba2d75df7fa99ee68bc11ad801d4e755ca43b7d516b3675086ae106a62c649203438c57b800fcb332625bec6555261ac3f0ad012b92fac122e4d08d0e240914904c8fdac48c1f9960caf964dfaa569a7d59d88bdeae6ffe38"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x1, 0x75, "a55fd99fa7c9c11c66749ae68706dc7a8b64c2a094b966631de9b027e7d99e5a543c9039726b47173fb50404d5c7a3deb38ebd16d6a80bae9da7a1ffdec45ffb4b1801feb6d8becb04fb0210dcc1e6bf9a3d9f2b0eefd0ff01d721deec2d41e436ba432d9d9b9dec872c336b3736886fde7f91cc42"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x1}}) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0xed2f85e54c34657e, 0x23, 0xf2, {0xf2, 0x1, "13473d39a8ae2172dce9ec7a013c100b19f5712bca12706100738aec3026d424304d34a6462df6579afb4616097bbb0683d00da12fefd9b5c6760e15a5f48751899d76616ab89c1dbdcbd7ec51c56f91a9b1b6c76637909c7ed130435aff954619aba13f7adf5d1d4d14adcb095b2d86c1af48d0632a059b8d9ecac6de8522470f4cf9d47f50c1109c9464da87231c1c423731a45ddb1ca977098b2237bd6e0db102b09e6aa97c075afbf121df82e6b67d2fdef63ce210064d3de4b65af99e6ef71473a0df14117ef5479388c25be58109468a56d694abdad9a89158fe92852bb391008db0d2b7e075c2441e2b68e0a7"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="0003b2000080b203a9e12f5d445682026056bfc8ec9d0c6477764688b38a09f6fd3488a4c43a12ad9faf3aa1c910ba97b742589db875f65dfdd2a3c33240db334749a85bca78d5205a5473ee65a3c41b21e70b5fd4fda83eff0fc6943013a5bfccb68aff7859a76d000000000000007fd87557d0945ff4d413bab3d9b47cf17bebaca4a17e7d01614491a5e308367253f9e0d45ce839454dfbfe6a75dc07b7701ac125400f8942ef54da1a0365457fda8101001b0ebae2c5"], &(0x7f00000001c0)={0x0, 0x22, 0x13, {[@main=@item_012={0x1, 0x0, 0x8, "9d"}, @main=@item_012={0x1, 0x0, 0xc, 'z'}, @main=@item_012={0x1, 0x0, 0x5, "ba"}, @main=@item_4={0x3, 0x0, 0xb, "6599425c"}, @main=@item_012={0x2, 0x0, 0x5, 'S_'}, @main=@item_012={0x2, 0x0, 0xc, "8921"}, @local=@item_012={0x1, 0x2, 0x2, "8d"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x40, 0x1, {0x22, 0xc1a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x11, 0x50, "5821334102651a6cbf7e068241e287ba89b4a525c95a30d5b405c0a75b6cae60a745f8b61398996f2340b9b85721949e6e945080f70c83cad23cb20156ee7cb1feaece99ec8fe38e4d42c02a064574bb"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x1, 0x52, "1e3fed0fff64a46a89693527b0c4e084f1adabf76b4bc3b770f4fba083034bb26d53c68aa063937be2030dfc4dbf836c7d0aea7be756dc3e8607e3fe92fdb7f436843b6ef1ec501626ebe1340094f8844fef"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x14}}) (rerun: 64) 03:10:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000100100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000110100000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 934.029459][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 934.129409][ T3731] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 934.269348][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 934.309495][T10944] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 934.373901][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 934.389703][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 934.489808][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 934.559536][ T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 934.572855][ T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 934.581776][ T14] usb 2-1: Product: syz [ 934.585938][ T14] usb 2-1: Manufacturer: syz [ 934.591046][ T14] usb 2-1: SerialNumber: syz [ 934.599207][ T14] usb 2-1: config 0 descriptor?? [ 934.640854][ T14] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 934.652417][ T14] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 934.660820][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 934.671436][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 934.680693][ T3731] usb 5-1: Product: syz [ 934.685063][ T3731] usb 5-1: Manufacturer: syz [ 934.689932][ T3731] usb 5-1: SerialNumber: syz [ 934.699845][T10944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.707774][ T3731] usb 5-1: config 0 descriptor?? [ 934.714095][T10944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 934.730035][T10944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.742773][T10944] usb 4-1: config 0 descriptor?? [ 934.750701][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 934.763025][ T3731] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 934.845074][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.853844][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.866750][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.877364][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.887931][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.898148][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.908754][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.918222][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.930067][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.939675][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.959021][ T3669] usb 2-1: USB disconnect, device number 11 [ 934.966738][ T3669] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 934.980669][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.991010][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.109452][T10944] usbhid 4-1:0.0: can't add hid device: -71 [ 935.115535][T10944] usbhid: probe of 4-1:0.0 failed with error -71 [ 935.128374][T10944] usb 4-1: USB disconnect, device number 83 03:10:07 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, 0xffffffffffffffff) write$char_usb(r2, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:10:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf0}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002400)={0x24, &(0x7f0000002300)={0x0, 0x21, 0x19, {0x19, 0x8, "5dbd86f44edd789826d91005f1bf63d832435a91f57db4"}}, &(0x7f0000002340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000002380)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0xb, "cc9e2ae0"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "a16dbf38"}, @global=@item_4={0x3, 0x1, 0x1, "6eed120b"}, @main=@item_4={0x3, 0x0, 0xb, "883bcbf7"}, @local=@item_4={0x3, 0x2, 0xa, "d203ade9"}, @global=@item_4={0x3, 0x1, 0x3, "a68ceda9"}]}}, &(0x7f00000023c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0xff, 0x1, {0x22, 0x7e6}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002440)={0x20, 0x17, 0x9d, "c41a5e33717914bffb2e13c032bb454dd51d865cd0cfa1f93a679b04b2003e3425ecf6cfcb58a9d06bac2c644639ab516a2951dbdf08b8f07ff147007c6b5ad4ea66a05e485e78efaf9a1e453980607213aea841d050a79a1efd0d5befbc6e10f9c16f5e3b4b6b5880edb624262438d46683352dff0536579a1c14a2c104c88c83abfd15434af179df8a8e7c64eb20981bf773015d782b1128d23335b1"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000002580)={0x20, 0x1, 0x74, "cf94c8a7a635fccd5aafa677101f52ce0ee1adc8b950610b59639e40bb2cf157a011d4854aadcfe72307f38dbfd92d5d892674569d0a7bb22fe8f2499ad0993b42a727f0c38c5d0b6625d8a5fb2c68433413069d0668c0216e823e270e6d431abda185cdc714558c288620008be68d1fab3cf32a"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x40, 0x31, 0x99, {0x99, 0x4df636e762e5c455, "0d88171c94418cdae23479f061e9de2a190b2610c06c0211ed0127498526b4111aff6f2d0bf5823c5365e85cc369a11461cb301c39726b7925c6f750330fc9afd3a63a0f96825aa395af1637b5e15ee402fa50ec727d4325bae76c021f592daacbfc6858ba4d0ff0c49e41246305b8a6aa726d6f463f59a228f950ac951c4d7383c42f7f8ea1719bafe59a081beb3f44e36097555b80ae"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "9cd91c4594fcb1ba361e2dc3f913525c4d6bff4a9e0397ac15f663b5e569d4d87d1bcdbab8b6163b99ad74b90c8f25f82d504248d3dc9f0877cf40fffbc982824c69882d5013505879fd107c862fddb8121df56ce1c0199e89a4c4ce559aa11efdd91b54901079da"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="f700a57e5d6600aa57dd5bc97cb1"], &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1c87, 0x3, 0x1, {0x22, 0xf7b}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x40, 0x16, 0xe0, "5fb1ac15cb009f4d5f40196f1d2d2614c0529f34a5c9a1d69088036c8e585c8127b8f54b6c9603fe11d02e92b138c033b0c8d6f5cfb1035582b249b787d6c62f1790bfb5a040dce425fa48b3b05c3eb4dc482609eb0c69c67831a22a958234769d5d048bb55556e8ca780623f4e263b248e57e179add899052d12353e373e9ce6e341eb86196d2b30e5777ccfe9f6d7f59557e4e073184e3768c09802c7118e1cdc3e70607615279fc8628328ca38141f414f12197881d1f1bccf59f05100068684fb601d5d8b4fd4ea4cd310c3ac691d78de1d565579650f4748cbb8f6c3aba"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000800)={0x20, 0x1, 0x58, "0f66b16d8d799aae613b81d83621d12cc1ed4f29c25a13eb910c45887a5fdbefce3dfccaa2dccf6cc8318cb16fb3efa386182506b38001a9942a7d4ec55f9214b91d94f2bdb80f2ccf9ec0bd2d426f042ebf52931aa56ae4"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000d80)={0x20, 0xf, 0x1a, {0x1a, 0xf, "5a4d5f1e676890913e9132042f02ee2e420057dc5f43ad2d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "92a746de6c39cdc55cbe6e14cd0e84020d13764cddd48480e347b979e7bf1421e2a403fb6f4e1b4d6a6987"}}, &(0x7f0000000e00)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1f, 0xff, 0x40}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x1, 0xf00, 0x0, [0x3f00, 0x0, 0xc03f, 0x3f, 0xff0011]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x8, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x29, 0x0, 0x8000, 0xf00, 0xfff}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x83, 0xa7, 0x0, "a777536e", "c89a693e"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x6, 0x3, 0x5, 0x7ff}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f40)={0x60, 0x16, 0x2c, "d56286f0cfaf8ee7f2207b1a306e482b494fabe82b394a6d13d2ae728dc52763291a4fa99da3e647c7e05e96"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001040)=ANY=[@ANYBLOB="200004000000a0001004"], &(0x7f0000001080)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x36}, &(0x7f0000001100)={0x40, 0xb, 0x2, "ea5b"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001200)={0x40, 0x19, 0x2, "3c82"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x40, 0xd, 0xc5, {0xc5, 0xc, "b3c3f28bae7515b0c39b0af4bd396e9251276f9e62a582944a11c1b72d4fa633bf1b033295643b9a04b069058044be68d98bdd506d1f388e6bed4632ef05084e195076699c76f3177e3ef8fb9ff6b36921af2a1f6a9308700ea974d090852a01dfb7a383c7b5cf677963b8e630316fdff27dfaa30d156857e8d8361c8ca7ef2f4e09acd530ec2cbf253bd78a59067160ab8df15d4734eade1b1daff2ec328e874bf15cc18ff831a97b2ab8ba1e868b2d42e7d1d8b5e0db3cb878d169d3f7c1f936f38a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x7, "ad50d210"}, @main=@item_012={0x2, 0x0, 0xb, "92fe"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa4c}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x21, "96ff748979a0fbc1ec8cd924edc1a5e163c9420f5cadd46f0decad580216201efa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x1, "1c"}, &(0x7f0000002680)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000001580)={0x24, &(0x7f0000001400)={0x20, 0xd, 0x9b, {0x9b, 0xa, "78a330237a22c31106481aa6d811ba44d2fffaccfabddd96539e4ff5dd83eed8bdf23839f3dfedb26d91338a056901804f6f27017ad50869b2d2206a836e9ecb6ef251bcadbfaf64fc01ac3259451843a88804d9e71115aaecc4b915e9309575d2bca15d3ffe509eb0518fe5c2366bfd4c1bee700f41fd8edb3091eaa5b3166ff04e5b4dce01478c7c2d38437f1b653643ee78a15904850aef"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000001500)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0x9, "e6"}, @local=@item_012={0x2, 0x2, 0x2, "2d82"}, @main=@item_012={0x2, 0x0, 0xb, "df6d"}, @global=@item_4={0x3, 0x1, 0x8, "ae95dbc0"}, @main=@item_012={0x2, 0x0, 0xb, "d544"}]}}, &(0x7f0000001540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xfc, 0x1, {0x22, 0x763}}}}, &(0x7f0000001780)={0x2c, &(0x7f00000015c0)={0xa0, 0x16, 0x49, "a84aec787c92e99660616c33d24f1dcf60bf9bd4e1f14187ba931837da492ab90627d96bbcc55317a4575f5912fb70f707ea259e60b5e37a827fa05ac78e98b2c3b0743c196f9b7059"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000016c0)={0x20, 0x1, 0x73, "f71e6c223e2b2196f550fe618c3c9eaa0152853bc67d360c99556e664b2b30c328e33b7719598c671eb4756e576cf106d27fb919a4569f068b819e561933855b93d7f71d7d372bec05960de1ea1d4b72decea49637daf96a50150e35f35703de38fe8add496fab8055e512386802350358f731"}, &(0x7f0000001740)={0x20, 0x3, 0x1, 0x81}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079082b406d049208b9af000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000002780)={0x14, &(0x7f00000026c0)={0x20, 0xe, 0x9d, {0x9d, 0x23, "15a48dee5dbde761c0682433e6ba4a45216dafe4d8e3c5ffdff27325892c01f15fd82fe6cca16ee3727691a134c6061eafe2f9a688034038d991a044a676f887d90bfa63bb2832bfb2f5e3ba5b261f13451363ec6cc5517872f463a2f4736f1a48e7532aac84152ed6d049ee8f6a9df2b00c06b142b163ba19fe49beda0bdc22cb8b7655c3c3f53e503056df534479daa2028d1e0cd794f2825493"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a00)={0x44, &(0x7f00000027c0)={0x40, 0x16, 0x3b, "6f4659ac17abc471734d7361129b672e746a83375d13f5321574f1d42d53fd780fd2d1a364ece47bf0e8995996d3cbe6b50623459f32ac161ee554"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000028c0)={0x20, 0x80, 0x1c, {0x3, 0x3, 0x3ff, 0x80, 0x1, 0x400, 0x38, 0x3, 0x8, 0x9, 0xdf1, 0x8000}}, &(0x7f0000002900)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000002940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002980)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000029c0)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") r2 = syz_usb_connect$cdc_ncm(0x2, 0x7d, &(0x7f00000017c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x7, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x81, 0x20, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x13}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0xa, 0x24, 0x7, 0xf9, 0x6, [0x3, 0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xee, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0xff, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0xfd}}}}}}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x5, 0x80, 0x6, 0x40, 0xd7}, 0x1f, &(0x7f0000001880)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "e691320f6e5eea762356d7d1068e73c3"}]}, 0x8, [{0x1d, &(0x7f00000018c0)=@string={0x1d, 0x3, "7bf77b3852bbf495e4ba6c2e43f0051d7e53ede19753a2781ab0ec"}}, {0x73, &(0x7f0000001900)=@string={0x73, 0x3, "3f81153a1ec8beb52147689d9977fc706d4162ceec8804a51ae4e09e2d9fff93b72541d6c9e5d3f02a86c938b27d274bafd714f50cb323754fe3d71da56e06f62d31fa995d803cdb6f6e98aa838005d9ce0453b05af74fed0646c1e89779fd95ff58aadb8e5218cd221f9a69282fc72d55"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io(r2, &(0x7f0000001d80)={0x2c, &(0x7f0000001b80)={0x20, 0x25, 0x29, {0x29, 0x3, "0bcde956601889289439b6f9126f42166719179a4a27db62b846523c3034391049b70f64421abd"}}, &(0x7f0000001bc0)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "62228284a840f0563db364547122df268cda29fdc0328f975ca1fe42c16829b04d3d778dedd422fa2064ec226fbbebebf1464d95e32f9f073210082fcc9bd978bd660d2c30dc157b63723cca0b21454ddd28397030a41accfa7201b7d4e6fce2baa60897b0acb0ff7f75c95876d1f7066fb63f40d8f30a5ea35667f779688c7e56d23219894f70d5f72d678043f25adc0f276df98bb89d3eb8a745ec8c2f4d1248cc473d01b7d1d80bbd5009ff2146b3e3db4d6037b8990ccbc55e1daf8b04b4490bc5cefc2dd7a690"}}, &(0x7f0000001cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x4, 0x0, "1e5d3e7f", "a63e12fc"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x0, 0x4, 0x0, 0x116, 0x401}}}, &(0x7f0000002240)={0x84, &(0x7f0000001dc0)={0x0, 0x18, 0xb0, "290f5f98b22cdd42c0f4a2940397e0e087f53d5f8dad722750f35dd1ec0f518b8ea0ad4633eb6e6d6c784f7585f3466786f91cc2448470d2176d478bd2d126412e771c1ee3b7ac3457d6f420e2edf9330d39b7d74f8ac303def0a1059cf31d4658684aa8e8d1ef2d7abbfd0fe2d87c3297304a34771a9bb722c76d46656fca4e307a5f81290c4d98b8589cd26fcd86c35615200272521076b434f924ba9464fe0cd4692832be247ddd27a003f9f659b6"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x72}, &(0x7f0000002000)={0x40, 0xb, 0x2, "bb47"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000002080)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x17, 0x6}, &(0x7f0000002100)={0x40, 0x19, 0x2, "7dae"}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x634}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002200)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x0, 0x0, 0x75, {0x75, 0x24, "7b2cf21607ff779c5844718dd4af849295756f7bae2f73a20d84bf3bfde34237fc4390c22ab24270972e6e65f6b21f27911ba74b8c40df1b093b1857221dc42859eda1d587f2c6f36d46aed5a33a6fbe9183daecc3c1ae04ed27437ee4f41d6ab9cf8c4c1b06631d4db98ad952f381b7065ae3"}}, &(0x7f0000000980)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "e41d07cd92a8d898c7502cc3063b7bb900001c680df66a31b5e981b84db8db207680ed1fc48a82e57c6e7ada0b7cfbef27c6620b4c03ddaea4fb0ae64a86e454efaf456f837d070cdd28c55e59094d4bbe44f400a8b9c4ceca2645d3225943245b2f0aeb1037ff7153dc334988ccd32eb2d9d96618310f23d0b368e37f66a8e2555121b7a421aee6ad68beafea5ba0ebf7a69c07e2777e50aee7ba4b7388263091a3"}}, &(0x7f0000000a40)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x0, "e2e0"}, @global=@item_4={0x3, 0x1, 0xb, "81b4ca66"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x98a}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x7c, "bd50750a948204c221087446ee8d0cb3ff35ea75983c051a20ac0601d92fd25883db244190c932243852761f65a2477d9edce8093ea006077dbb87f2f15ae776243a8eadef119817763de3a54fda1b748bda73e44aa5299b3bc04951817bd50845addc5e7236c4149d05d3717c9999b73298140d83e5a50580e2ac1e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c40)={0x20, 0x1, 0xad, "89d2add28f5d0b80a99e00f09f2802287244fab4dcf8f05ddf4198b1924eec5980f11aaedef4701f9e4b447210cba3ba627928e5d8650910d31b3ae9af37a4c549e2ed245fe8e3d57e52e56b3855e78be4bd4a73fb898baeb9030629e752a3fee76fd1bbf10913e32299901f7f53c81388931121bd9a8923819ae8696a87cfb4b11e9b5d333026edc41817184240bf054aac43321dcfdeb2775b0cc6aa6a11d3cb2d93f5d61ee5c3ba3f4bcbe2"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) 03:10:07 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) (async) read$char_usb(r1, &(0x7f0000000180)=""/197, 0xc5) [ 936.752889][T10944] usb 5-1: USB disconnect, device number 55 [ 936.787185][T13441] __nla_validate_parse: 10 callbacks suppressed [ 936.787215][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 936.819194][T10944] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 936.832667][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 936.854420][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 936.888008][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:10:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x168}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 937.021552][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.032535][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 937.042972][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.065037][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 937.074504][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 937.111080][ T22] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 937.239492][T10944] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 937.319474][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 937.439566][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 937.489747][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 937.531116][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.543406][ T22] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 937.552544][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.570469][ T22] usb 4-1: config 0 descriptor?? [ 937.610106][ T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 937.619199][ T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 937.627791][ T14] usb 2-1: Product: syz [ 937.629520][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 937.632214][ T14] usb 2-1: Manufacturer: syz [ 937.647588][ T14] usb 2-1: SerialNumber: syz [ 937.655406][ T14] usb 2-1: config 0 descriptor?? [ 937.702279][ T14] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 937.713040][ T14] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 937.829694][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 937.838772][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 937.847594][T10944] usb 5-1: Product: syz [ 937.852139][T10944] usb 5-1: Manufacturer: syz [ 937.856764][T10944] usb 5-1: SerialNumber: syz [ 937.872247][T10944] usb 5-1: config 0 descriptor?? [ 937.904009][ T14] usb 2-1: USB disconnect, device number 12 [ 937.915439][ T14] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 937.926170][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 937.944967][T10944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 938.041061][ T22] keytouch 0003:0926:3333.006E: fixing up Keytouch IEC report descriptor [ 938.052400][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006E/input/input136 [ 938.134696][ T22] keytouch 0003:0926:3333.006E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 939.658399][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.667128][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:10:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup2(r1, r1) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:10:10 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301", @ANYRES16], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x3, 0x9, 0x5cca}) write$char_usb(r2, &(0x7f0000000180)="8c8533197016e3110823c74451b71c5c7e70019a54ff35321522b5a865597233644b16f742cb769fcee752cef63a46e2bc8d373ae43fc7f2aefd046105c9c45a14d23d169a9e4486030faff8a1", 0x4d) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:10:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 939.830299][T10944] usb 5-1: USB disconnect, device number 56 [ 939.868342][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 939.870206][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 939.885641][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.890015][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 939.904904][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.219346][ T3694] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 940.309343][T10944] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 940.459347][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 940.549358][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 940.579566][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 940.591297][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 59137, setting to 1024 [ 940.669581][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 940.759468][ T3694] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 940.769402][ T3694] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 940.778051][ T3694] usb 2-1: Product: syz [ 940.782556][ T3694] usb 2-1: Manufacturer: syz [ 940.787271][ T3694] usb 2-1: SerialNumber: syz [ 940.802999][ T3694] usb 2-1: config 0 descriptor?? [ 940.820051][T13468] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 940.841002][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 940.853274][ T3694] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 940.862641][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 940.875508][T10944] usb 5-1: Product: syz [ 940.880156][ T3694] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 940.889555][T10944] usb 5-1: Manufacturer: syz [ 940.894187][T10944] usb 5-1: SerialNumber: syz [ 940.920302][T10944] usb 5-1: config 0 descriptor?? 03:10:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x294}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002400)={0x24, &(0x7f0000002300)={0x0, 0x21, 0x19, {0x19, 0x8, "5dbd86f44edd789826d91005f1bf63d832435a91f57db4"}}, &(0x7f0000002340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000002380)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0xb, "cc9e2ae0"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "a16dbf38"}, @global=@item_4={0x3, 0x1, 0x1, "6eed120b"}, @main=@item_4={0x3, 0x0, 0xb, "883bcbf7"}, @local=@item_4={0x3, 0x2, 0xa, "d203ade9"}, @global=@item_4={0x3, 0x1, 0x3, "a68ceda9"}]}}, &(0x7f00000023c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0xff, 0x1, {0x22, 0x7e6}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002440)={0x20, 0x17, 0x9d, "c41a5e33717914bffb2e13c032bb454dd51d865cd0cfa1f93a679b04b2003e3425ecf6cfcb58a9d06bac2c644639ab516a2951dbdf08b8f07ff147007c6b5ad4ea66a05e485e78efaf9a1e453980607213aea841d050a79a1efd0d5befbc6e10f9c16f5e3b4b6b5880edb624262438d46683352dff0536579a1c14a2c104c88c83abfd15434af179df8a8e7c64eb20981bf773015d782b1128d23335b1"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000002580)={0x20, 0x1, 0x74, "cf94c8a7a635fccd5aafa677101f52ce0ee1adc8b950610b59639e40bb2cf157a011d4854aadcfe72307f38dbfd92d5d892674569d0a7bb22fe8f2499ad0993b42a727f0c38c5d0b6625d8a5fb2c68433413069d0668c0216e823e270e6d431abda185cdc714558c288620008be68d1fab3cf32a"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x40, 0x31, 0x99, {0x99, 0x4df636e762e5c455, "0d88171c94418cdae23479f061e9de2a190b2610c06c0211ed0127498526b4111aff6f2d0bf5823c5365e85cc369a11461cb301c39726b7925c6f750330fc9afd3a63a0f96825aa395af1637b5e15ee402fa50ec727d4325bae76c021f592daacbfc6858ba4d0ff0c49e41246305b8a6aa726d6f463f59a228f950ac951c4d7383c42f7f8ea1719bafe59a081beb3f44e36097555b80ae"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "9cd91c4594fcb1ba361e2dc3f913525c4d6bff4a9e0397ac15f663b5e569d4d87d1bcdbab8b6163b99ad74b90c8f25f82d504248d3dc9f0877cf40fffbc982824c69882d5013505879fd107c862fddb8121df56ce1c0199e89a4c4ce559aa11efdd91b54901079da"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="f700a57e5d6600aa57dd5bc97cb1"], &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1c87, 0x3, 0x1, {0x22, 0xf7b}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x40, 0x16, 0xe0, "5fb1ac15cb009f4d5f40196f1d2d2614c0529f34a5c9a1d69088036c8e585c8127b8f54b6c9603fe11d02e92b138c033b0c8d6f5cfb1035582b249b787d6c62f1790bfb5a040dce425fa48b3b05c3eb4dc482609eb0c69c67831a22a958234769d5d048bb55556e8ca780623f4e263b248e57e179add899052d12353e373e9ce6e341eb86196d2b30e5777ccfe9f6d7f59557e4e073184e3768c09802c7118e1cdc3e70607615279fc8628328ca38141f414f12197881d1f1bccf59f05100068684fb601d5d8b4fd4ea4cd310c3ac691d78de1d565579650f4748cbb8f6c3aba"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000800)={0x20, 0x1, 0x58, "0f66b16d8d799aae613b81d83621d12cc1ed4f29c25a13eb910c45887a5fdbefce3dfccaa2dccf6cc8318cb16fb3efa386182506b38001a9942a7d4ec55f9214b91d94f2bdb80f2ccf9ec0bd2d426f042ebf52931aa56ae4"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000d80)={0x20, 0xf, 0x1a, {0x1a, 0xf, "5a4d5f1e676890913e9132042f02ee2e420057dc5f43ad2d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "92a746de6c39cdc55cbe6e14cd0e84020d13764cddd48480e347b979e7bf1421e2a403fb6f4e1b4d6a6987"}}, &(0x7f0000000e00)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1f, 0xff, 0x40}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x1, 0xf00, 0x0, [0x3f00, 0x0, 0xc03f, 0x3f, 0xff0011]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x8, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x29, 0x0, 0x8000, 0xf00, 0xfff}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x83, 0xa7, 0x0, "a777536e", "c89a693e"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x6, 0x3, 0x5, 0x7ff}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f40)={0x60, 0x16, 0x2c, "d56286f0cfaf8ee7f2207b1a306e482b494fabe82b394a6d13d2ae728dc52763291a4fa99da3e647c7e05e96"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001040)=ANY=[@ANYBLOB="200004000000a0001004"], &(0x7f0000001080)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x36}, &(0x7f0000001100)={0x40, 0xb, 0x2, "ea5b"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001200)={0x40, 0x19, 0x2, "3c82"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x40, 0xd, 0xc5, {0xc5, 0xc, "b3c3f28bae7515b0c39b0af4bd396e9251276f9e62a582944a11c1b72d4fa633bf1b033295643b9a04b069058044be68d98bdd506d1f388e6bed4632ef05084e195076699c76f3177e3ef8fb9ff6b36921af2a1f6a9308700ea974d090852a01dfb7a383c7b5cf677963b8e630316fdff27dfaa30d156857e8d8361c8ca7ef2f4e09acd530ec2cbf253bd78a59067160ab8df15d4734eade1b1daff2ec328e874bf15cc18ff831a97b2ab8ba1e868b2d42e7d1d8b5e0db3cb878d169d3f7c1f936f38a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x7, "ad50d210"}, @main=@item_012={0x2, 0x0, 0xb, "92fe"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa4c}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x21, "96ff748979a0fbc1ec8cd924edc1a5e163c9420f5cadd46f0decad580216201efa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x1, "1c"}, &(0x7f0000002680)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000001580)={0x24, &(0x7f0000001400)={0x20, 0xd, 0x9b, {0x9b, 0xa, "78a330237a22c31106481aa6d811ba44d2fffaccfabddd96539e4ff5dd83eed8bdf23839f3dfedb26d91338a056901804f6f27017ad50869b2d2206a836e9ecb6ef251bcadbfaf64fc01ac3259451843a88804d9e71115aaecc4b915e9309575d2bca15d3ffe509eb0518fe5c2366bfd4c1bee700f41fd8edb3091eaa5b3166ff04e5b4dce01478c7c2d38437f1b653643ee78a15904850aef"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000001500)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0x9, "e6"}, @local=@item_012={0x2, 0x2, 0x2, "2d82"}, @main=@item_012={0x2, 0x0, 0xb, "df6d"}, @global=@item_4={0x3, 0x1, 0x8, "ae95dbc0"}, @main=@item_012={0x2, 0x0, 0xb, "d544"}]}}, &(0x7f0000001540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xfc, 0x1, {0x22, 0x763}}}}, &(0x7f0000001780)={0x2c, &(0x7f00000015c0)={0xa0, 0x16, 0x49, "a84aec787c92e99660616c33d24f1dcf60bf9bd4e1f14187ba931837da492ab90627d96bbcc55317a4575f5912fb70f707ea259e60b5e37a827fa05ac78e98b2c3b0743c196f9b7059"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000016c0)={0x20, 0x1, 0x73, "f71e6c223e2b2196f550fe618c3c9eaa0152853bc67d360c99556e664b2b30c328e33b7719598c671eb4756e576cf106d27fb919a4569f068b819e561933855b93d7f71d7d372bec05960de1ea1d4b72decea49637daf96a50150e35f35703de38fe8add496fab8055e512386802350358f731"}, &(0x7f0000001740)={0x20, 0x3, 0x1, 0x81}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079082b406d049208b9af000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000002780)={0x14, &(0x7f00000026c0)={0x20, 0xe, 0x9d, {0x9d, 0x23, "15a48dee5dbde761c0682433e6ba4a45216dafe4d8e3c5ffdff27325892c01f15fd82fe6cca16ee3727691a134c6061eafe2f9a688034038d991a044a676f887d90bfa63bb2832bfb2f5e3ba5b261f13451363ec6cc5517872f463a2f4736f1a48e7532aac84152ed6d049ee8f6a9df2b00c06b142b163ba19fe49beda0bdc22cb8b7655c3c3f53e503056df534479daa2028d1e0cd794f2825493"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a00)={0x44, &(0x7f00000027c0)={0x40, 0x16, 0x3b, "6f4659ac17abc471734d7361129b672e746a83375d13f5321574f1d42d53fd780fd2d1a364ece47bf0e8995996d3cbe6b50623459f32ac161ee554"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000028c0)={0x20, 0x80, 0x1c, {0x3, 0x3, 0x3ff, 0x80, 0x1, 0x400, 0x38, 0x3, 0x8, 0x9, 0xdf1, 0x8000}}, &(0x7f0000002900)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000002940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002980)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000029c0)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") r2 = syz_usb_connect$cdc_ncm(0x2, 0x7d, &(0x7f00000017c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x7, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x81, 0x20, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x13}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0xa, 0x24, 0x7, 0xf9, 0x6, [0x3, 0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xee, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0xff, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0xfd}}}}}}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x5, 0x80, 0x6, 0x40, 0xd7}, 0x1f, &(0x7f0000001880)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "e691320f6e5eea762356d7d1068e73c3"}]}, 0x8, [{0x1d, &(0x7f00000018c0)=@string={0x1d, 0x3, "7bf77b3852bbf495e4ba6c2e43f0051d7e53ede19753a2781ab0ec"}}, {0x73, &(0x7f0000001900)=@string={0x73, 0x3, "3f81153a1ec8beb52147689d9977fc706d4162ceec8804a51ae4e09e2d9fff93b72541d6c9e5d3f02a86c938b27d274bafd714f50cb323754fe3d71da56e06f62d31fa995d803cdb6f6e98aa838005d9ce0453b05af74fed0646c1e89779fd95ff58aadb8e5218cd221f9a69282fc72d55"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io(r2, &(0x7f0000001d80)={0x2c, &(0x7f0000001b80)={0x20, 0x25, 0x29, {0x29, 0x3, "0bcde956601889289439b6f9126f42166719179a4a27db62b846523c3034391049b70f64421abd"}}, &(0x7f0000001bc0)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "62228284a840f0563db364547122df268cda29fdc0328f975ca1fe42c16829b04d3d778dedd422fa2064ec226fbbebebf1464d95e32f9f073210082fcc9bd978bd660d2c30dc157b63723cca0b21454ddd28397030a41accfa7201b7d4e6fce2baa60897b0acb0ff7f75c95876d1f7066fb63f40d8f30a5ea35667f779688c7e56d23219894f70d5f72d678043f25adc0f276df98bb89d3eb8a745ec8c2f4d1248cc473d01b7d1d80bbd5009ff2146b3e3db4d6037b8990ccbc55e1daf8b04b4490bc5cefc2dd7a690"}}, &(0x7f0000001cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x4, 0x0, "1e5d3e7f", "a63e12fc"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x0, 0x4, 0x0, 0x116, 0x401}}}, &(0x7f0000002240)={0x84, &(0x7f0000001dc0)={0x0, 0x18, 0xb0, "290f5f98b22cdd42c0f4a2940397e0e087f53d5f8dad722750f35dd1ec0f518b8ea0ad4633eb6e6d6c784f7585f3466786f91cc2448470d2176d478bd2d126412e771c1ee3b7ac3457d6f420e2edf9330d39b7d74f8ac303def0a1059cf31d4658684aa8e8d1ef2d7abbfd0fe2d87c3297304a34771a9bb722c76d46656fca4e307a5f81290c4d98b8589cd26fcd86c35615200272521076b434f924ba9464fe0cd4692832be247ddd27a003f9f659b6"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x72}, &(0x7f0000002000)={0x40, 0xb, 0x2, "bb47"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000002080)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x17, 0x6}, &(0x7f0000002100)={0x40, 0x19, 0x2, "7dae"}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x634}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002200)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x0, 0x0, 0x75, {0x75, 0x24, "7b2cf21607ff779c5844718dd4af849295756f7bae2f73a20d84bf3bfde34237fc4390c22ab24270972e6e65f6b21f27911ba74b8c40df1b093b1857221dc42859eda1d587f2c6f36d46aed5a33a6fbe9183daecc3c1ae04ed27437ee4f41d6ab9cf8c4c1b06631d4db98ad952f381b7065ae3"}}, &(0x7f0000000980)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "e41d07cd92a8d898c7502cc3063b7bb900001c680df66a31b5e981b84db8db207680ed1fc48a82e57c6e7ada0b7cfbef27c6620b4c03ddaea4fb0ae64a86e454efaf456f837d070cdd28c55e59094d4bbe44f400a8b9c4ceca2645d3225943245b2f0aeb1037ff7153dc334988ccd32eb2d9d96618310f23d0b368e37f66a8e2555121b7a421aee6ad68beafea5ba0ebf7a69c07e2777e50aee7ba4b7388263091a3"}}, &(0x7f0000000a40)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x0, "e2e0"}, @global=@item_4={0x3, 0x1, 0xb, "81b4ca66"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x98a}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x7c, "bd50750a948204c221087446ee8d0cb3ff35ea75983c051a20ac0601d92fd25883db244190c932243852761f65a2477d9edce8093ea006077dbb87f2f15ae776243a8eadef119817763de3a54fda1b748bda73e44aa5299b3bc04951817bd50845addc5e7236c4149d05d3717c9999b73298140d83e5a50580e2ac1e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c40)={0x20, 0x1, 0xad, "89d2add28f5d0b80a99e00f09f2802287244fab4dcf8f05ddf4198b1924eec5980f11aaedef4701f9e4b447210cba3ba627928e5d8650910d31b3ae9af37a4c549e2ed245fe8e3d57e52e56b3855e78be4bd4a73fb898baeb9030629e752a3fee76fd1bbf10913e32299901f7f53c81388931121bd9a8923819ae8696a87cfb4b11e9b5d333026edc41817184240bf054aac43321dcfdeb2775b0cc6aa6a11d3cb2d93f5d61ee5c3ba3f4bcbe2"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000002400)={0x24, &(0x7f0000002300)={0x0, 0x21, 0x19, {0x19, 0x8, "5dbd86f44edd789826d91005f1bf63d832435a91f57db4"}}, &(0x7f0000002340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000002380)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0xb, "cc9e2ae0"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "a16dbf38"}, @global=@item_4={0x3, 0x1, 0x1, "6eed120b"}, @main=@item_4={0x3, 0x0, 0xb, "883bcbf7"}, @local=@item_4={0x3, 0x2, 0xa, "d203ade9"}, @global=@item_4={0x3, 0x1, 0x3, "a68ceda9"}]}}, &(0x7f00000023c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0xff, 0x1, {0x22, 0x7e6}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002440)={0x20, 0x17, 0x9d, "c41a5e33717914bffb2e13c032bb454dd51d865cd0cfa1f93a679b04b2003e3425ecf6cfcb58a9d06bac2c644639ab516a2951dbdf08b8f07ff147007c6b5ad4ea66a05e485e78efaf9a1e453980607213aea841d050a79a1efd0d5befbc6e10f9c16f5e3b4b6b5880edb624262438d46683352dff0536579a1c14a2c104c88c83abfd15434af179df8a8e7c64eb20981bf773015d782b1128d23335b1"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000002580)={0x20, 0x1, 0x74, "cf94c8a7a635fccd5aafa677101f52ce0ee1adc8b950610b59639e40bb2cf157a011d4854aadcfe72307f38dbfd92d5d892674569d0a7bb22fe8f2499ad0993b42a727f0c38c5d0b6625d8a5fb2c68433413069d0668c0216e823e270e6d431abda185cdc714558c288620008be68d1fab3cf32a"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x40, 0x31, 0x99, {0x99, 0x4df636e762e5c455, "0d88171c94418cdae23479f061e9de2a190b2610c06c0211ed0127498526b4111aff6f2d0bf5823c5365e85cc369a11461cb301c39726b7925c6f750330fc9afd3a63a0f96825aa395af1637b5e15ee402fa50ec727d4325bae76c021f592daacbfc6858ba4d0ff0c49e41246305b8a6aa726d6f463f59a228f950ac951c4d7383c42f7f8ea1719bafe59a081beb3f44e36097555b80ae"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "9cd91c4594fcb1ba361e2dc3f913525c4d6bff4a9e0397ac15f663b5e569d4d87d1bcdbab8b6163b99ad74b90c8f25f82d504248d3dc9f0877cf40fffbc982824c69882d5013505879fd107c862fddb8121df56ce1c0199e89a4c4ce559aa11efdd91b54901079da"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="f700a57e5d6600aa57dd5bc97cb1"], &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1c87, 0x3, 0x1, {0x22, 0xf7b}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x40, 0x16, 0xe0, "5fb1ac15cb009f4d5f40196f1d2d2614c0529f34a5c9a1d69088036c8e585c8127b8f54b6c9603fe11d02e92b138c033b0c8d6f5cfb1035582b249b787d6c62f1790bfb5a040dce425fa48b3b05c3eb4dc482609eb0c69c67831a22a958234769d5d048bb55556e8ca780623f4e263b248e57e179add899052d12353e373e9ce6e341eb86196d2b30e5777ccfe9f6d7f59557e4e073184e3768c09802c7118e1cdc3e70607615279fc8628328ca38141f414f12197881d1f1bccf59f05100068684fb601d5d8b4fd4ea4cd310c3ac691d78de1d565579650f4748cbb8f6c3aba"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000800)={0x20, 0x1, 0x58, "0f66b16d8d799aae613b81d83621d12cc1ed4f29c25a13eb910c45887a5fdbefce3dfccaa2dccf6cc8318cb16fb3efa386182506b38001a9942a7d4ec55f9214b91d94f2bdb80f2ccf9ec0bd2d426f042ebf52931aa56ae4"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000d80)={0x20, 0xf, 0x1a, {0x1a, 0xf, "5a4d5f1e676890913e9132042f02ee2e420057dc5f43ad2d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "92a746de6c39cdc55cbe6e14cd0e84020d13764cddd48480e347b979e7bf1421e2a403fb6f4e1b4d6a6987"}}, &(0x7f0000000e00)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1f, 0xff, 0x40}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x1, 0xf00, 0x0, [0x3f00, 0x0, 0xc03f, 0x3f, 0xff0011]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x8, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x29, 0x0, 0x8000, 0xf00, 0xfff}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x83, 0xa7, 0x0, "a777536e", "c89a693e"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x6, 0x3, 0x5, 0x7ff}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f40)={0x60, 0x16, 0x2c, "d56286f0cfaf8ee7f2207b1a306e482b494fabe82b394a6d13d2ae728dc52763291a4fa99da3e647c7e05e96"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001040)=ANY=[@ANYBLOB="200004000000a0001004"], &(0x7f0000001080)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x36}, &(0x7f0000001100)={0x40, 0xb, 0x2, "ea5b"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001200)={0x40, 0x19, 0x2, "3c82"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x40, 0xd, 0xc5, {0xc5, 0xc, "b3c3f28bae7515b0c39b0af4bd396e9251276f9e62a582944a11c1b72d4fa633bf1b033295643b9a04b069058044be68d98bdd506d1f388e6bed4632ef05084e195076699c76f3177e3ef8fb9ff6b36921af2a1f6a9308700ea974d090852a01dfb7a383c7b5cf677963b8e630316fdff27dfaa30d156857e8d8361c8ca7ef2f4e09acd530ec2cbf253bd78a59067160ab8df15d4734eade1b1daff2ec328e874bf15cc18ff831a97b2ab8ba1e868b2d42e7d1d8b5e0db3cb878d169d3f7c1f936f38a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x7, "ad50d210"}, @main=@item_012={0x2, 0x0, 0xb, "92fe"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa4c}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x21, "96ff748979a0fbc1ec8cd924edc1a5e163c9420f5cadd46f0decad580216201efa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x1, "1c"}, &(0x7f0000002680)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000001580)={0x24, &(0x7f0000001400)={0x20, 0xd, 0x9b, {0x9b, 0xa, "78a330237a22c31106481aa6d811ba44d2fffaccfabddd96539e4ff5dd83eed8bdf23839f3dfedb26d91338a056901804f6f27017ad50869b2d2206a836e9ecb6ef251bcadbfaf64fc01ac3259451843a88804d9e71115aaecc4b915e9309575d2bca15d3ffe509eb0518fe5c2366bfd4c1bee700f41fd8edb3091eaa5b3166ff04e5b4dce01478c7c2d38437f1b653643ee78a15904850aef"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000001500)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0x9, "e6"}, @local=@item_012={0x2, 0x2, 0x2, "2d82"}, @main=@item_012={0x2, 0x0, 0xb, "df6d"}, @global=@item_4={0x3, 0x1, 0x8, "ae95dbc0"}, @main=@item_012={0x2, 0x0, 0xb, "d544"}]}}, &(0x7f0000001540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xfc, 0x1, {0x22, 0x763}}}}, &(0x7f0000001780)={0x2c, &(0x7f00000015c0)={0xa0, 0x16, 0x49, "a84aec787c92e99660616c33d24f1dcf60bf9bd4e1f14187ba931837da492ab90627d96bbcc55317a4575f5912fb70f707ea259e60b5e37a827fa05ac78e98b2c3b0743c196f9b7059"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000016c0)={0x20, 0x1, 0x73, "f71e6c223e2b2196f550fe618c3c9eaa0152853bc67d360c99556e664b2b30c328e33b7719598c671eb4756e576cf106d27fb919a4569f068b819e561933855b93d7f71d7d372bec05960de1ea1d4b72decea49637daf96a50150e35f35703de38fe8add496fab8055e512386802350358f731"}, &(0x7f0000001740)={0x20, 0x3, 0x1, 0x81}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079082b406d049208b9af000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000002780)={0x14, &(0x7f00000026c0)={0x20, 0xe, 0x9d, {0x9d, 0x23, "15a48dee5dbde761c0682433e6ba4a45216dafe4d8e3c5ffdff27325892c01f15fd82fe6cca16ee3727691a134c6061eafe2f9a688034038d991a044a676f887d90bfa63bb2832bfb2f5e3ba5b261f13451363ec6cc5517872f463a2f4736f1a48e7532aac84152ed6d049ee8f6a9df2b00c06b142b163ba19fe49beda0bdc22cb8b7655c3c3f53e503056df534479daa2028d1e0cd794f2825493"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a00)={0x44, &(0x7f00000027c0)={0x40, 0x16, 0x3b, "6f4659ac17abc471734d7361129b672e746a83375d13f5321574f1d42d53fd780fd2d1a364ece47bf0e8995996d3cbe6b50623459f32ac161ee554"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000028c0)={0x20, 0x80, 0x1c, {0x3, 0x3, 0x3ff, 0x80, 0x1, 0x400, 0x38, 0x3, 0x8, 0x9, 0xdf1, 0x8000}}, &(0x7f0000002900)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000002940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002980)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000029c0)={0x20, 0x89, 0x2}}) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) syz_usb_connect$cdc_ncm(0x2, 0x7d, &(0x7f00000017c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x7, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x81, 0x20, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x13}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0xa, 0x24, 0x7, 0xf9, 0x6, [0x3, 0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xee, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0xff, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0xfd}}}}}}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x5, 0x80, 0x6, 0x40, 0xd7}, 0x1f, &(0x7f0000001880)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "e691320f6e5eea762356d7d1068e73c3"}]}, 0x8, [{0x1d, &(0x7f00000018c0)=@string={0x1d, 0x3, "7bf77b3852bbf495e4ba6c2e43f0051d7e53ede19753a2781ab0ec"}}, {0x73, &(0x7f0000001900)=@string={0x73, 0x3, "3f81153a1ec8beb52147689d9977fc706d4162ceec8804a51ae4e09e2d9fff93b72541d6c9e5d3f02a86c938b27d274bafd714f50cb323754fe3d71da56e06f62d31fa995d803cdb6f6e98aa838005d9ce0453b05af74fed0646c1e89779fd95ff58aadb8e5218cd221f9a69282fc72d55"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x409}}]}) (async) syz_usb_control_io(r2, &(0x7f0000001d80)={0x2c, &(0x7f0000001b80)={0x20, 0x25, 0x29, {0x29, 0x3, "0bcde956601889289439b6f9126f42166719179a4a27db62b846523c3034391049b70f64421abd"}}, &(0x7f0000001bc0)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "62228284a840f0563db364547122df268cda29fdc0328f975ca1fe42c16829b04d3d778dedd422fa2064ec226fbbebebf1464d95e32f9f073210082fcc9bd978bd660d2c30dc157b63723cca0b21454ddd28397030a41accfa7201b7d4e6fce2baa60897b0acb0ff7f75c95876d1f7066fb63f40d8f30a5ea35667f779688c7e56d23219894f70d5f72d678043f25adc0f276df98bb89d3eb8a745ec8c2f4d1248cc473d01b7d1d80bbd5009ff2146b3e3db4d6037b8990ccbc55e1daf8b04b4490bc5cefc2dd7a690"}}, &(0x7f0000001cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x4, 0x0, "1e5d3e7f", "a63e12fc"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x0, 0x4, 0x0, 0x116, 0x401}}}, &(0x7f0000002240)={0x84, &(0x7f0000001dc0)={0x0, 0x18, 0xb0, "290f5f98b22cdd42c0f4a2940397e0e087f53d5f8dad722750f35dd1ec0f518b8ea0ad4633eb6e6d6c784f7585f3466786f91cc2448470d2176d478bd2d126412e771c1ee3b7ac3457d6f420e2edf9330d39b7d74f8ac303def0a1059cf31d4658684aa8e8d1ef2d7abbfd0fe2d87c3297304a34771a9bb722c76d46656fca4e307a5f81290c4d98b8589cd26fcd86c35615200272521076b434f924ba9464fe0cd4692832be247ddd27a003f9f659b6"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x72}, &(0x7f0000002000)={0x40, 0xb, 0x2, "bb47"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000002080)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x17, 0x6}, &(0x7f0000002100)={0x40, 0x19, 0x2, "7dae"}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x634}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002200)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x0, 0x0, 0x75, {0x75, 0x24, "7b2cf21607ff779c5844718dd4af849295756f7bae2f73a20d84bf3bfde34237fc4390c22ab24270972e6e65f6b21f27911ba74b8c40df1b093b1857221dc42859eda1d587f2c6f36d46aed5a33a6fbe9183daecc3c1ae04ed27437ee4f41d6ab9cf8c4c1b06631d4db98ad952f381b7065ae3"}}, &(0x7f0000000980)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "e41d07cd92a8d898c7502cc3063b7bb900001c680df66a31b5e981b84db8db207680ed1fc48a82e57c6e7ada0b7cfbef27c6620b4c03ddaea4fb0ae64a86e454efaf456f837d070cdd28c55e59094d4bbe44f400a8b9c4ceca2645d3225943245b2f0aeb1037ff7153dc334988ccd32eb2d9d96618310f23d0b368e37f66a8e2555121b7a421aee6ad68beafea5ba0ebf7a69c07e2777e50aee7ba4b7388263091a3"}}, &(0x7f0000000a40)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x0, "e2e0"}, @global=@item_4={0x3, 0x1, 0xb, "81b4ca66"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x98a}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x7c, "bd50750a948204c221087446ee8d0cb3ff35ea75983c051a20ac0601d92fd25883db244190c932243852761f65a2477d9edce8093ea006077dbb87f2f15ae776243a8eadef119817763de3a54fda1b748bda73e44aa5299b3bc04951817bd50845addc5e7236c4149d05d3717c9999b73298140d83e5a50580e2ac1e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c40)={0x20, 0x1, 0xad, "89d2add28f5d0b80a99e00f09f2802287244fab4dcf8f05ddf4198b1924eec5980f11aaedef4701f9e4b447210cba3ba627928e5d8650910d31b3ae9af37a4c549e2ed245fe8e3d57e52e56b3855e78be4bd4a73fb898baeb9030629e752a3fee76fd1bbf10913e32299901f7f53c81388931121bd9a8923819ae8696a87cfb4b11e9b5d333026edc41817184240bf054aac43321dcfdeb2775b0cc6aa6a11d3cb2d93f5d61ee5c3ba3f4bcbe2"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) (async) [ 940.957171][ T14] usb 4-1: USB disconnect, device number 84 [ 940.993869][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) 03:10:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001000000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 941.028013][T10944] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 03:10:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001fffffff14000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x300}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 941.150415][ T4840] usb 2-1: USB disconnect, device number 13 [ 941.159332][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 941.165651][T13468] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 941.439788][ T14] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 941.809464][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.820552][ T14] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 941.829752][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.840150][ T14] usb 4-1: config 0 descriptor?? [ 942.320996][ T14] keytouch 0003:0926:3333.006F: fixing up Keytouch IEC report descriptor [ 942.331586][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006F/input/input137 [ 942.416969][ T14] keytouch 0003:0926:3333.006F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 942.844757][ T4840] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:10:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x368}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000002000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup2(r1, r1) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:10:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 942.924410][ T3731] usb 5-1: USB disconnect, device number 57 [ 942.957254][T13499] __nla_validate_parse: 8 callbacks suppressed [ 942.957275][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 942.973438][T13500] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 942.974254][ T3731] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 942.997683][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.021717][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 943.051344][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.349424][ T3731] usb 5-1: new high-speed USB device number 58 using dummy_hcd 03:10:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002400)={0x24, &(0x7f0000002300)={0x0, 0x21, 0x19, {0x19, 0x8, "5dbd86f44edd789826d91005f1bf63d832435a91f57db4"}}, &(0x7f0000002340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000002380)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0xb, "cc9e2ae0"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "a16dbf38"}, @global=@item_4={0x3, 0x1, 0x1, "6eed120b"}, @main=@item_4={0x3, 0x0, 0xb, "883bcbf7"}, @local=@item_4={0x3, 0x2, 0xa, "d203ade9"}, @global=@item_4={0x3, 0x1, 0x3, "a68ceda9"}]}}, &(0x7f00000023c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0xff, 0x1, {0x22, 0x7e6}}}}, &(0x7f0000002640)={0x2c, &(0x7f0000002440)={0x20, 0x17, 0x9d, "c41a5e33717914bffb2e13c032bb454dd51d865cd0cfa1f93a679b04b2003e3425ecf6cfcb58a9d06bac2c644639ab516a2951dbdf08b8f07ff147007c6b5ad4ea66a05e485e78efaf9a1e453980607213aea841d050a79a1efd0d5befbc6e10f9c16f5e3b4b6b5880edb624262438d46683352dff0536579a1c14a2c104c88c83abfd15434af179df8a8e7c64eb20981bf773015d782b1128d23335b1"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000002580)={0x20, 0x1, 0x74, "cf94c8a7a635fccd5aafa677101f52ce0ee1adc8b950610b59639e40bb2cf157a011d4854aadcfe72307f38dbfd92d5d892674569d0a7bb22fe8f2499ad0993b42a727f0c38c5d0b6625d8a5fb2c68433413069d0668c0216e823e270e6d431abda185cdc714558c288620008be68d1fab3cf32a"}, &(0x7f0000002600)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x40, 0x31, 0x99, {0x99, 0x4df636e762e5c455, "0d88171c94418cdae23479f061e9de2a190b2610c06c0211ed0127498526b4111aff6f2d0bf5823c5365e85cc369a11461cb301c39726b7925c6f750330fc9afd3a63a0f96825aa395af1637b5e15ee402fa50ec727d4325bae76c021f592daacbfc6858ba4d0ff0c49e41246305b8a6aa726d6f463f59a228f950ac951c4d7383c42f7f8ea1719bafe59a081beb3f44e36097555b80ae"}}, &(0x7f0000000540)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "9cd91c4594fcb1ba361e2dc3f913525c4d6bff4a9e0397ac15f663b5e569d4d87d1bcdbab8b6163b99ad74b90c8f25f82d504248d3dc9f0877cf40fffbc982824c69882d5013505879fd107c862fddb8121df56ce1c0199e89a4c4ce559aa11efdd91b54901079da"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="f700a57e5d6600aa57dd5bc97cb1"], &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1c87, 0x3, 0x1, {0x22, 0xf7b}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x40, 0x16, 0xe0, "5fb1ac15cb009f4d5f40196f1d2d2614c0529f34a5c9a1d69088036c8e585c8127b8f54b6c9603fe11d02e92b138c033b0c8d6f5cfb1035582b249b787d6c62f1790bfb5a040dce425fa48b3b05c3eb4dc482609eb0c69c67831a22a958234769d5d048bb55556e8ca780623f4e263b248e57e179add899052d12353e373e9ce6e341eb86196d2b30e5777ccfe9f6d7f59557e4e073184e3768c09802c7118e1cdc3e70607615279fc8628328ca38141f414f12197881d1f1bccf59f05100068684fb601d5d8b4fd4ea4cd310c3ac691d78de1d565579650f4748cbb8f6c3aba"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000800)={0x20, 0x1, 0x58, "0f66b16d8d799aae613b81d83621d12cc1ed4f29c25a13eb910c45887a5fdbefce3dfccaa2dccf6cc8318cb16fb3efa386182506b38001a9942a7d4ec55f9214b91d94f2bdb80f2ccf9ec0bd2d426f042ebf52931aa56ae4"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) (rerun: 32) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000d80)={0x20, 0xf, 0x1a, {0x1a, 0xf, "5a4d5f1e676890913e9132042f02ee2e420057dc5f43ad2d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "92a746de6c39cdc55cbe6e14cd0e84020d13764cddd48480e347b979e7bf1421e2a403fb6f4e1b4d6a6987"}}, &(0x7f0000000e00)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1f, 0xff, 0x40}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x1, 0xf00, 0x0, [0x3f00, 0x0, 0xc03f, 0x3f, 0xff0011]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x8, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x29, 0x0, 0x8000, 0xf00, 0xfff}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x83, 0xa7, 0x0, "a777536e", "c89a693e"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x6, 0x3, 0x5, 0x7ff}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f40)={0x60, 0x16, 0x2c, "d56286f0cfaf8ee7f2207b1a306e482b494fabe82b394a6d13d2ae728dc52763291a4fa99da3e647c7e05e96"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001040)=ANY=[@ANYBLOB="200004000000a0001004"], &(0x7f0000001080)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x36}, &(0x7f0000001100)={0x40, 0xb, 0x2, "ea5b"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001200)={0x40, 0x19, 0x2, "3c82"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x40, 0xd, 0xc5, {0xc5, 0xc, "b3c3f28bae7515b0c39b0af4bd396e9251276f9e62a582944a11c1b72d4fa633bf1b033295643b9a04b069058044be68d98bdd506d1f388e6bed4632ef05084e195076699c76f3177e3ef8fb9ff6b36921af2a1f6a9308700ea974d090852a01dfb7a383c7b5cf677963b8e630316fdff27dfaa30d156857e8d8361c8ca7ef2f4e09acd530ec2cbf253bd78a59067160ab8df15d4734eade1b1daff2ec328e874bf15cc18ff831a97b2ab8ba1e868b2d42e7d1d8b5e0db3cb878d169d3f7c1f936f38a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x7, "ad50d210"}, @main=@item_012={0x2, 0x0, 0xb, "92fe"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa4c}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x21, "96ff748979a0fbc1ec8cd924edc1a5e163c9420f5cadd46f0decad580216201efa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x1, "1c"}, &(0x7f0000002680)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000001580)={0x24, &(0x7f0000001400)={0x20, 0xd, 0x9b, {0x9b, 0xa, "78a330237a22c31106481aa6d811ba44d2fffaccfabddd96539e4ff5dd83eed8bdf23839f3dfedb26d91338a056901804f6f27017ad50869b2d2206a836e9ecb6ef251bcadbfaf64fc01ac3259451843a88804d9e71115aaecc4b915e9309575d2bca15d3ffe509eb0518fe5c2366bfd4c1bee700f41fd8edb3091eaa5b3166ff04e5b4dce01478c7c2d38437f1b653643ee78a15904850aef"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000001500)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0x9, "e6"}, @local=@item_012={0x2, 0x2, 0x2, "2d82"}, @main=@item_012={0x2, 0x0, 0xb, "df6d"}, @global=@item_4={0x3, 0x1, 0x8, "ae95dbc0"}, @main=@item_012={0x2, 0x0, 0xb, "d544"}]}}, &(0x7f0000001540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xfc, 0x1, {0x22, 0x763}}}}, &(0x7f0000001780)={0x2c, &(0x7f00000015c0)={0xa0, 0x16, 0x49, "a84aec787c92e99660616c33d24f1dcf60bf9bd4e1f14187ba931837da492ab90627d96bbcc55317a4575f5912fb70f707ea259e60b5e37a827fa05ac78e98b2c3b0743c196f9b7059"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000016c0)={0x20, 0x1, 0x73, "f71e6c223e2b2196f550fe618c3c9eaa0152853bc67d360c99556e664b2b30c328e33b7719598c671eb4756e576cf106d27fb919a4569f068b819e561933855b93d7f71d7d372bec05960de1ea1d4b72decea49637daf96a50150e35f35703de38fe8add496fab8055e512386802350358f731"}, &(0x7f0000001740)={0x20, 0x3, 0x1, 0x81}}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079082b406d049208b9af000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000002780)={0x14, &(0x7f00000026c0)={0x20, 0xe, 0x9d, {0x9d, 0x23, "15a48dee5dbde761c0682433e6ba4a45216dafe4d8e3c5ffdff27325892c01f15fd82fe6cca16ee3727691a134c6061eafe2f9a688034038d991a044a676f887d90bfa63bb2832bfb2f5e3ba5b261f13451363ec6cc5517872f463a2f4736f1a48e7532aac84152ed6d049ee8f6a9df2b00c06b142b163ba19fe49beda0bdc22cb8b7655c3c3f53e503056df534479daa2028d1e0cd794f2825493"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a00)={0x44, &(0x7f00000027c0)={0x40, 0x16, 0x3b, "6f4659ac17abc471734d7361129b672e746a83375d13f5321574f1d42d53fd780fd2d1a364ece47bf0e8995996d3cbe6b50623459f32ac161ee554"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000028c0)={0x20, 0x80, 0x1c, {0x3, 0x3, 0x3ff, 0x80, 0x1, 0x400, 0x38, 0x3, 0x8, 0x9, 0xdf1, 0x8000}}, &(0x7f0000002900)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000002940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002980)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000029c0)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") r2 = syz_usb_connect$cdc_ncm(0x2, 0x7d, &(0x7f00000017c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x7, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x81, 0x20, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x13}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0xa, 0x24, 0x7, 0xf9, 0x6, [0x3, 0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xee, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0xff, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0xfd}}}}}}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x5, 0x80, 0x6, 0x40, 0xd7}, 0x1f, &(0x7f0000001880)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "e691320f6e5eea762356d7d1068e73c3"}]}, 0x8, [{0x1d, &(0x7f00000018c0)=@string={0x1d, 0x3, "7bf77b3852bbf495e4ba6c2e43f0051d7e53ede19753a2781ab0ec"}}, {0x73, &(0x7f0000001900)=@string={0x73, 0x3, "3f81153a1ec8beb52147689d9977fc706d4162ceec8804a51ae4e09e2d9fff93b72541d6c9e5d3f02a86c938b27d274bafd714f50cb323754fe3d71da56e06f62d31fa995d803cdb6f6e98aa838005d9ce0453b05af74fed0646c1e89779fd95ff58aadb8e5218cd221f9a69282fc72d55"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io(r2, &(0x7f0000001d80)={0x2c, &(0x7f0000001b80)={0x20, 0x25, 0x29, {0x29, 0x3, "0bcde956601889289439b6f9126f42166719179a4a27db62b846523c3034391049b70f64421abd"}}, &(0x7f0000001bc0)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "62228284a840f0563db364547122df268cda29fdc0328f975ca1fe42c16829b04d3d778dedd422fa2064ec226fbbebebf1464d95e32f9f073210082fcc9bd978bd660d2c30dc157b63723cca0b21454ddd28397030a41accfa7201b7d4e6fce2baa60897b0acb0ff7f75c95876d1f7066fb63f40d8f30a5ea35667f779688c7e56d23219894f70d5f72d678043f25adc0f276df98bb89d3eb8a745ec8c2f4d1248cc473d01b7d1d80bbd5009ff2146b3e3db4d6037b8990ccbc55e1daf8b04b4490bc5cefc2dd7a690"}}, &(0x7f0000001cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x4, 0x0, "1e5d3e7f", "a63e12fc"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x0, 0x4, 0x0, 0x116, 0x401}}}, &(0x7f0000002240)={0x84, &(0x7f0000001dc0)={0x0, 0x18, 0xb0, "290f5f98b22cdd42c0f4a2940397e0e087f53d5f8dad722750f35dd1ec0f518b8ea0ad4633eb6e6d6c784f7585f3466786f91cc2448470d2176d478bd2d126412e771c1ee3b7ac3457d6f420e2edf9330d39b7d74f8ac303def0a1059cf31d4658684aa8e8d1ef2d7abbfd0fe2d87c3297304a34771a9bb722c76d46656fca4e307a5f81290c4d98b8589cd26fcd86c35615200272521076b434f924ba9464fe0cd4692832be247ddd27a003f9f659b6"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x72}, &(0x7f0000002000)={0x40, 0xb, 0x2, "bb47"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000002080)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x17, 0x6}, &(0x7f0000002100)={0x40, 0x19, 0x2, "7dae"}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x634}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002200)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x0, 0x0, 0x75, {0x75, 0x24, "7b2cf21607ff779c5844718dd4af849295756f7bae2f73a20d84bf3bfde34237fc4390c22ab24270972e6e65f6b21f27911ba74b8c40df1b093b1857221dc42859eda1d587f2c6f36d46aed5a33a6fbe9183daecc3c1ae04ed27437ee4f41d6ab9cf8c4c1b06631d4db98ad952f381b7065ae3"}}, &(0x7f0000000980)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "e41d07cd92a8d898c7502cc3063b7bb900001c680df66a31b5e981b84db8db207680ed1fc48a82e57c6e7ada0b7cfbef27c6620b4c03ddaea4fb0ae64a86e454efaf456f837d070cdd28c55e59094d4bbe44f400a8b9c4ceca2645d3225943245b2f0aeb1037ff7153dc334988ccd32eb2d9d96618310f23d0b368e37f66a8e2555121b7a421aee6ad68beafea5ba0ebf7a69c07e2777e50aee7ba4b7388263091a3"}}, &(0x7f0000000a40)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x0, "e2e0"}, @global=@item_4={0x3, 0x1, 0xb, "81b4ca66"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x98a}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x7c, "bd50750a948204c221087446ee8d0cb3ff35ea75983c051a20ac0601d92fd25883db244190c932243852761f65a2477d9edce8093ea006077dbb87f2f15ae776243a8eadef119817763de3a54fda1b748bda73e44aa5299b3bc04951817bd50845addc5e7236c4149d05d3717c9999b73298140d83e5a50580e2ac1e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c40)={0x20, 0x1, 0xad, "89d2add28f5d0b80a99e00f09f2802287244fab4dcf8f05ddf4198b1924eec5980f11aaedef4701f9e4b447210cba3ba627928e5d8650910d31b3ae9af37a4c549e2ed245fe8e3d57e52e56b3855e78be4bd4a73fb898baeb9030629e752a3fee76fd1bbf10913e32299901f7f53c81388931121bd9a8923819ae8696a87cfb4b11e9b5d333026edc41817184240bf054aac43321dcfdeb2775b0cc6aa6a11d3cb2d93f5d61ee5c3ba3f4bcbe2"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x81}}) 03:10:13 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301", @ANYRES16], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x3, 0x9, 0x5cca}) write$char_usb(r2, &(0x7f0000000180)="8c8533197016e3110823c74451b71c5c7e70019a54ff35321522b5a865597233644b16f742cb769fcee752cef63a46e2bc8d373ae43fc7f2aefd046105c9c45a14d23d169a9e4486030faff8a1", 0x4d) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:10:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000003000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x500}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 943.582794][ T3694] usb 4-1: USB disconnect, device number 85 [ 943.612301][ T3731] usb 5-1: Using ep0 maxpacket: 32 03:10:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 943.637233][T13514] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 943.649923][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.671099][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:10:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 943.696625][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.735019][T13522] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 03:10:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x600}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 943.779329][ T3731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 03:10:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x3, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 943.899411][T10944] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 943.949652][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 943.959110][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 943.968007][ T3731] usb 5-1: Product: syz [ 943.972698][ T3731] usb 5-1: Manufacturer: syz [ 943.977440][ T3731] usb 5-1: SerialNumber: syz [ 943.984091][ T3731] usb 5-1: config 0 descriptor?? [ 944.041269][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 944.052948][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 944.059522][ T3694] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 944.139369][T10944] usb 2-1: Using ep0 maxpacket: 32 [ 944.259509][T10944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 944.271144][T10944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 59137, setting to 1024 [ 944.419533][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.430569][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 944.439908][T10944] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 944.448967][T10944] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 944.457505][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.466096][T10944] usb 2-1: Product: syz [ 944.471328][ T3694] usb 4-1: config 0 descriptor?? [ 944.476474][T10944] usb 2-1: Manufacturer: syz [ 944.481237][T10944] usb 2-1: SerialNumber: syz [ 944.491870][T10944] usb 2-1: config 0 descriptor?? [ 944.509639][T13512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 944.530755][T10944] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 944.547541][T10944] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 944.751023][T10944] usb 2-1: USB disconnect, device number 14 [ 944.758184][T10944] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 945.019656][ T3694] usbhid 4-1:0.0: can't add hid device: -71 [ 945.026463][ T3694] usbhid: probe of 4-1:0.0 failed with error -71 [ 945.044025][ T3694] usb 4-1: USB disconnect, device number 86 03:10:16 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup2(r1, r1) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="51decad30044ad1dab8971bd16d1796e636c8e4c5522ca1b28601d070bf7b6762de94be1ad8e22322b0424cd5adddca20dac597eb5f400878b3a08696e87d6c30ffe2338f5b72fba9a1d8e06e83fdb79a93f91d0d8b090ab877b7c50b0a6c1fe2f3326f89ebed94fdaf1ca7b5ec2d7718fdf827b63a57c8053fb688566c616b582dc6942318718945ea3f38787", 0x8d) 03:10:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000a000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x4, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x294, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0xe9, 0xef, 0xcb, 0x20, 0xbd3, 0x555, 0xdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x282, 0x1, 0x2, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0x1c, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x1f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf7, 0x800, 0x9, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x8, 0xa5, 0x8a, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x8}, @call_mgmt={0x5}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x20, 0x3, 0x0, 0x8, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x8}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0xc9, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xc, 0xe, 0x200, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x7f, 0x1, 0x1}}, {{0x9, 0x5, 0x5, 0xc, 0x3e7, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xbb49}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xe6, 0x1f, 0xcd, [@generic={0x7, 0x5, "75138eda4b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x70a}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x2, 0x40, 0x6, [@generic={0x82, 0x2, "1b6f19430669ee2c99de39c2a4b6d71d32f1a61d2b12f5165d04c3a906c1bb6a265e15c3ee856a460a4649857e9a20d067da3400c6f08a03adb08dd1101deb0777c6578a3069c5a1d79b34c88bd69e494b6ccfb3fe354f5539cdac1b688364ea2df6c51d1219207e655b05f1f0af37f16950578ee85bf1f3435d3c79e78b997b"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x4, 0xff, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5e, 0x401}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0xf7, 0x5, [@generic={0xb, 0xa, "b22a2201fc0286eea5"}, @generic={0xfd, 0x21, "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"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x6, 0x1}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xff, 0x6, 0x5, 0x8, 0x20}, 0x2b, &(0x7f0000000440)={0x5, 0xf, 0x2b, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x81, 0x9, 0x2a6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0xff, 0xff, 0x7ff, 0x25}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0xe4, &(0x7f0000000980)=@string={0xe4, 0x3, "5bf583ee5347f44ebd63565d9dfdcc4bc25d98596981d4aaa172973db401e3e96101f461504b3783ca2a208ed18917386ccf9cb2a6c592429f9565aa4d87ea20a3051a544b09f21beb8bd8d27ae40fb37be477c6baac5294baee1157dcc74944efeae2d40cbed44f415b9dab16203d4a4e618d63e76dd61119f978f4d6c01b8df28d50824172ea357701a268fd5bbba3d4a43bcbf53c008be101a23fbb7e9ccdb0e65a9171f575873e6359de9813438e49249c4f1e69845a049e760e108f004939b02212bf5db2f84dd5b3789546fb48b0e6ae932fa3f9d32e12f2786c54d63baee6"}}, {0xab, &(0x7f0000000a80)=@string={0xab, 0x3, "f24a79d786b873f8327a182c6d99bbb16be3db79413cd394b5a020eb086cc33372920131e1caba6306209fdcab920047f6074e75b4215e7869241b461a989ee6b4f7b77ee95c4b939fb8b5c96865877e7279fade5c8029f973631d057fb0fb131529f8f7537cc9c11929b6b21286c4f2ea27c79da0166f56b8b51cf6eba6e5ee28f2bf9293663177698f93e9998c3f235538d25692faefe8373a32d44d393f57d691a0a395e91e89c4"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x0, 0x30, 0xfe, {0xfe, 0x3, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "e25cce27"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x44f}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000001c0)={0x20, 0x0, 0x1e, "b3109256dd2bc05a0f3e3a0a211442bb4771caac65367b209f33dc7d914e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") 03:10:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x700}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:16 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301", @ANYRES16], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x3, 0x9, 0x5cca}) write$char_usb(r2, &(0x7f0000000180)="8c8533197016e3110823c74451b71c5c7e70019a54ff35321522b5a865597233644b16f742cb769fcee752cef63a46e2bc8d373ae43fc7f2aefd046105c9c45a14d23d169a9e4486030faff8a1", 0x4d) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301", @ANYRES16], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x3, 0x9, 0x5cca}) (async) write$char_usb(r2, &(0x7f0000000180)="8c8533197016e3110823c74451b71c5c7e70019a54ff35321522b5a865597233644b16f742cb769fcee752cef63a46e2bc8d373ae43fc7f2aefd046105c9c45a14d23d169a9e4486030faff8a1", 0x4d) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) [ 945.972220][T10944] usb 5-1: USB disconnect, device number 58 03:10:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 946.013664][T10944] ldusb 5-1:0.0: LD USB Device #0 now disconnected 03:10:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x5, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000e000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa00}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000010000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 946.299397][ T3731] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 946.307090][ T14] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 946.429552][T10944] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 946.575037][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 946.689520][T10944] usb 5-1: Using ep0 maxpacket: 32 [ 946.699617][ T3731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.710747][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 946.722082][ T3731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.731249][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 59137, setting to 1024 [ 946.746932][ T3731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.756725][ T3731] usb 4-1: config 0 descriptor?? [ 946.829598][T10944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 946.909720][ T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 946.918809][ T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 946.927430][ T14] usb 2-1: Product: syz [ 946.931703][ T14] usb 2-1: Manufacturer: syz [ 946.936298][ T14] usb 2-1: SerialNumber: syz [ 946.943197][ T14] usb 2-1: config 0 descriptor?? [ 946.959561][T13545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 946.980756][ T14] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 946.998002][ T14] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 947.009490][T10944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 947.019367][T10944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 947.028024][T10944] usb 5-1: Product: syz [ 947.032935][T10944] usb 5-1: Manufacturer: syz [ 947.037752][T10944] usb 5-1: SerialNumber: syz [ 947.048506][T10944] usb 5-1: config 0 descriptor?? [ 947.104119][T10944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 947.115520][T10944] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 947.207125][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.216847][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.240417][ T3731] keytouch 0003:0926:3333.0070: fixing up Keytouch IEC report descriptor [ 947.252094][ T3731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0070/input/input138 [ 947.286092][ T14] usb 2-1: USB disconnect, device number 15 [ 947.299619][T13545] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 947.308251][ T14] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 947.315792][T13560] ldusb: No device or device unplugged -19 [ 947.338705][ T3731] keytouch 0003:0926:3333.0070: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 947.486341][T13561] ldusb: No device or device unplugged -19 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000012000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb00}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:19 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="9d2b014dd64eac14d8262f821c9b5d890fac594e6595033d2b372506f4fbdd7fa53a741fe10aa167fc95383a97da18f3ad4a04c622f6e9f6ea3ff201a32f03a5ead899f96e6d5825f2eb41e1637e04689404a724eec4374df86994a1c29d8cb9ec09a7f9cdf20eb0c40e0168507e4392a1895d22e4f2a117d589a0ead3cfa62cc2cc6b76feb64b3147811b5385cc4911104ba9933b94d65510562b76a484f28aa778e47cbb8d10c0eb10fba138e73aebbbc48a726c0fa448bde7bbf77760c09dc6fb98dba89d2d904c071095863693349f4b497b56261edd90cd31aa461695b01dff4b1c1a52a2126423c3dc0bc7809b0c29", 0xf2) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:10:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x294, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0xe9, 0xef, 0xcb, 0x20, 0xbd3, 0x555, 0xdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x282, 0x1, 0x2, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0x1c, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x1f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf7, 0x800, 0x9, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x8, 0xa5, 0x8a, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x8}, @call_mgmt={0x5}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x20, 0x3, 0x0, 0x8, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x8}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0xc9, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xc, 0xe, 0x200, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x7f, 0x1, 0x1}}, {{0x9, 0x5, 0x5, 0xc, 0x3e7, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xbb49}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xe6, 0x1f, 0xcd, [@generic={0x7, 0x5, "75138eda4b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x70a}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x2, 0x40, 0x6, [@generic={0x82, 0x2, "1b6f19430669ee2c99de39c2a4b6d71d32f1a61d2b12f5165d04c3a906c1bb6a265e15c3ee856a460a4649857e9a20d067da3400c6f08a03adb08dd1101deb0777c6578a3069c5a1d79b34c88bd69e494b6ccfb3fe354f5539cdac1b688364ea2df6c51d1219207e655b05f1f0af37f16950578ee85bf1f3435d3c79e78b997b"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x4, 0xff, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5e, 0x401}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0xf7, 0x5, [@generic={0xb, 0xa, "b22a2201fc0286eea5"}, @generic={0xfd, 0x21, "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"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x6, 0x1}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xff, 0x6, 0x5, 0x8, 0x20}, 0x2b, &(0x7f0000000440)={0x5, 0xf, 0x2b, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x81, 0x9, 0x2a6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0xff, 0xff, 0x7ff, 0x25}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0xe4, &(0x7f0000000980)=@string={0xe4, 0x3, "5bf583ee5347f44ebd63565d9dfdcc4bc25d98596981d4aaa172973db401e3e96101f461504b3783ca2a208ed18917386ccf9cb2a6c592429f9565aa4d87ea20a3051a544b09f21beb8bd8d27ae40fb37be477c6baac5294baee1157dcc74944efeae2d40cbed44f415b9dab16203d4a4e618d63e76dd61119f978f4d6c01b8df28d50824172ea357701a268fd5bbba3d4a43bcbf53c008be101a23fbb7e9ccdb0e65a9171f575873e6359de9813438e49249c4f1e69845a049e760e108f004939b02212bf5db2f84dd5b3789546fb48b0e6ae932fa3f9d32e12f2786c54d63baee6"}}, {0xab, &(0x7f0000000a80)=@string={0xab, 0x3, "f24a79d786b873f8327a182c6d99bbb16be3db79413cd394b5a020eb086cc33372920131e1caba6306209fdcab920047f6074e75b4215e7869241b461a989ee6b4f7b77ee95c4b939fb8b5c96865877e7279fade5c8029f973631d057fb0fb131529f8f7537cc9c11929b6b21286c4f2ea27c79da0166f56b8b51cf6eba6e5ee28f2bf9293663177698f93e9998c3f235538d25692faefe8373a32d44d393f57d691a0a395e91e89c4"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x0, 0x30, 0xfe, {0xfe, 0x3, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "e25cce27"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x44f}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000001c0)={0x20, 0x0, 0x1e, "b3109256dd2bc05a0f3e3a0a211442bb4771caac65367b209f33dc7d914e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect(0x1, 0x294, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0xe9, 0xef, 0xcb, 0x20, 0xbd3, 0x555, 0xdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x282, 0x1, 0x2, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0x1c, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x1f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf7, 0x800, 0x9, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x8, 0xa5, 0x8a, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x8}, @call_mgmt={0x5}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x20, 0x3, 0x0, 0x8, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x8}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0xc9, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xc, 0xe, 0x200, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x7f, 0x1, 0x1}}, {{0x9, 0x5, 0x5, 0xc, 0x3e7, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xbb49}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xe6, 0x1f, 0xcd, [@generic={0x7, 0x5, "75138eda4b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x70a}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x2, 0x40, 0x6, [@generic={0x82, 0x2, "1b6f19430669ee2c99de39c2a4b6d71d32f1a61d2b12f5165d04c3a906c1bb6a265e15c3ee856a460a4649857e9a20d067da3400c6f08a03adb08dd1101deb0777c6578a3069c5a1d79b34c88bd69e494b6ccfb3fe354f5539cdac1b688364ea2df6c51d1219207e655b05f1f0af37f16950578ee85bf1f3435d3c79e78b997b"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x4, 0xff, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5e, 0x401}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0xf7, 0x5, [@generic={0xb, 0xa, "b22a2201fc0286eea5"}, @generic={0xfd, 0x21, "04a3f075e285dcf042e30f73812dec8796412e2a4858d988dfca3a066d1fcf554dcb96e5f9f9be2f60576e05c4af436dff7b23aaa7e1147e4a22f0421262cb0cb1cd31a96e54a0886406b00a4a4518d560fd4f08c0e62f20a773c744e628a3acff02b890125dc3c17b9cd859e9813f3565df4c160c521e9792bcce53c7740437323af62fb33cf1576f5c2ab136e2fe554d82e75862edd27c392f0813acf83278e8f70cdb12c743f471a801a01273df2a41d55e05a4810e55af1f4ba4ffb6b8336580e991fbf54ed9c7f9f0e372c0d658e9008087a91df547c8a937e8406884e479e858e2dd85ac7c9886fa14e5e7c65b5ffcd4cfd6246c60a334bb"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x6, 0x1}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xff, 0x6, 0x5, 0x8, 0x20}, 0x2b, &(0x7f0000000440)={0x5, 0xf, 0x2b, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x81, 0x9, 0x2a6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0xff, 0xff, 0x7ff, 0x25}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0xe4, &(0x7f0000000980)=@string={0xe4, 0x3, "5bf583ee5347f44ebd63565d9dfdcc4bc25d98596981d4aaa172973db401e3e96101f461504b3783ca2a208ed18917386ccf9cb2a6c592429f9565aa4d87ea20a3051a544b09f21beb8bd8d27ae40fb37be477c6baac5294baee1157dcc74944efeae2d40cbed44f415b9dab16203d4a4e618d63e76dd61119f978f4d6c01b8df28d50824172ea357701a268fd5bbba3d4a43bcbf53c008be101a23fbb7e9ccdb0e65a9171f575873e6359de9813438e49249c4f1e69845a049e760e108f004939b02212bf5db2f84dd5b3789546fb48b0e6ae932fa3f9d32e12f2786c54d63baee6"}}, {0xab, &(0x7f0000000a80)=@string={0xab, 0x3, "f24a79d786b873f8327a182c6d99bbb16be3db79413cd394b5a020eb086cc33372920131e1caba6306209fdcab920047f6074e75b4215e7869241b461a989ee6b4f7b77ee95c4b939fb8b5c96865877e7279fade5c8029f973631d057fb0fb131529f8f7537cc9c11929b6b21286c4f2ea27c79da0166f56b8b51cf6eba6e5ee28f2bf9293663177698f93e9998c3f235538d25692faefe8373a32d44d393f57d691a0a395e91e89c4"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x0, 0x30, 0xfe, {0xfe, 0x3, "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"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "e25cce27"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x44f}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000001c0)={0x20, 0x0, 0x1e, "b3109256dd2bc05a0f3e3a0a211442bb4771caac65367b209f33dc7d914e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)=ANY=[@ANYBLOB="2001c7000000722ccc8cbf3594ddc074977ab904f71bd15d4818796c84b1bca5f4cac8394b523fb14056a87f23276ac089931e2ef1ffae1dad2690ce3e22792365e2204a880b91658580019951e0dec7b54196fca9bc4c8012a2e7d0946226af76437c2ec39d281b56df83cac71e8c3b3e21a2d31e06582ad699f3fa4589e4de99c4a3241c9a5d892235190a8c7d14083722bf40cd2f5e041b507f4f71a96ef181657623adae7361c8fc5a8c8e9f5afe32b802e89edaaa92143ed219ab7ec4157630fa9bd41f527175c55af85a21bba26a762a4b8d85904d5ba0992a2ef6fa47c07413ee78d57e8ff5e2935cff657fdb763be5a8eb2c835d9759d06c7398186a1a8ff5555ae834b73046e93a9c6dc0c0cb26bebdb222714ec03e4f89ce8cb289dedb674e067d5cf7680cec50c929c31059e5"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") (async) 03:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x6, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:19 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, 0x0, 0x0) [ 949.005590][ T3669] usb 4-1: USB disconnect, device number 87 [ 949.044015][ T3694] usb 5-1: USB disconnect, device number 59 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000102000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 949.086849][ T3694] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 949.102072][T13573] __nla_validate_parse: 21 callbacks suppressed [ 949.102094][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000103000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 949.138759][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 949.170729][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000104000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 949.216386][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x7, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc00}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000105000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000106000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 949.313866][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 949.334586][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 949.349137][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000107000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 949.380461][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 949.399570][ T5338] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 949.509600][ T3669] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 949.539429][ T3694] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 949.649390][ T5338] usb 2-1: Using ep0 maxpacket: 32 [ 949.772447][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 949.783483][ T3694] usb 5-1: Using ep0 maxpacket: 32 [ 949.869516][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.880707][ T3669] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 949.890078][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.899796][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 949.911392][ T3669] usb 4-1: config 0 descriptor?? [ 949.949773][ T5338] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 949.958832][ T5338] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 949.971561][ T5338] usb 2-1: Product: syz [ 949.975766][ T5338] usb 2-1: Manufacturer: syz [ 949.980481][ T5338] usb 2-1: SerialNumber: syz [ 949.986852][ T5338] usb 2-1: config 0 descriptor?? [ 950.030774][ T5338] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 950.041949][ T5338] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 950.089592][ T3694] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 950.098759][ T3694] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 950.107485][ T3694] usb 5-1: Product: syz [ 950.111730][ T3694] usb 5-1: Manufacturer: syz [ 950.116426][ T3694] usb 5-1: SerialNumber: syz [ 950.124864][ T3694] usb 5-1: config 0 descriptor?? [ 950.170969][ T3694] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 950.185801][ T3694] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 950.370492][T13575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.379103][T13575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.391831][ T3731] usb 2-1: USB disconnect, device number 16 [ 950.399771][T13574] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 950.406909][T13598] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 950.416062][ T3669] keytouch 0003:0926:3333.0071: fixing up Keytouch IEC report descriptor [ 950.426526][ T3669] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0071/input/input139 [ 950.506120][ T3669] keytouch 0003:0926:3333.0071: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 951.168619][T13602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.181716][T13602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.196163][ T3690] usb 4-1: USB disconnect, device number 88 03:10:22 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="9d2b014dd64eac14d8262f821c9b5d890fac594e6595033d2b372506f4fbdd7fa53a741fe10aa167fc95383a97da18f3ad4a04c622f6e9f6ea3ff201a32f03a5ead899f96e6d5825f2eb41e1637e04689404a724eec4374df86994a1c29d8cb9ec09a7f9cdf20eb0c40e0168507e4392a1895d22e4f2a117d589a0ead3cfa62cc2cc6b76feb64b3147811b5385cc4911104ba9933b94d65510562b76a484f28aa778e47cbb8d10c0eb10fba138e73aebbbc48a726c0fa448bde7bbf77760c09dc6fb98dba89d2d904c071095863693349f4b497b56261edd90cd31aa461695b01dff4b1c1a52a2126423c3dc0bc7809b0c29", 0xf2) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, &(0x7f0000000180)="9d2b014dd64eac14d8262f821c9b5d890fac594e6595033d2b372506f4fbdd7fa53a741fe10aa167fc95383a97da18f3ad4a04c622f6e9f6ea3ff201a32f03a5ead899f96e6d5825f2eb41e1637e04689404a724eec4374df86994a1c29d8cb9ec09a7f9cdf20eb0c40e0168507e4392a1895d22e4f2a117d589a0ead3cfa62cc2cc6b76feb64b3147811b5385cc4911104ba9933b94d65510562b76a484f28aa778e47cbb8d10c0eb10fba138e73aebbbc48a726c0fa448bde7bbf77760c09dc6fb98dba89d2d904c071095863693349f4b497b56261edd90cd31aa461695b01dff4b1c1a52a2126423c3dc0bc7809b0c29", 0xf2) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) (async) syz_usb_disconnect(r0) (async) 03:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x8, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc70}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) [ 952.064189][ T3731] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 952.101668][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:10:22 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, 0x0, 0x0) 03:10:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000108000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x294, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0xe9, 0xef, 0xcb, 0x20, 0xbd3, 0x555, 0xdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x282, 0x1, 0x2, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0x1c, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x1f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf7, 0x800, 0x9, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x8, 0xa5, 0x8a, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x8}, @call_mgmt={0x5}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x20, 0x3, 0x0, 0x8, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x8}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0xc9, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xc, 0xe, 0x200, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x7f, 0x1, 0x1}}, {{0x9, 0x5, 0x5, 0xc, 0x3e7, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xbb49}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xe6, 0x1f, 0xcd, [@generic={0x7, 0x5, "75138eda4b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x70a}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x2, 0x40, 0x6, [@generic={0x82, 0x2, "1b6f19430669ee2c99de39c2a4b6d71d32f1a61d2b12f5165d04c3a906c1bb6a265e15c3ee856a460a4649857e9a20d067da3400c6f08a03adb08dd1101deb0777c6578a3069c5a1d79b34c88bd69e494b6ccfb3fe354f5539cdac1b688364ea2df6c51d1219207e655b05f1f0af37f16950578ee85bf1f3435d3c79e78b997b"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x4, 0xff, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5e, 0x401}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0xf7, 0x5, [@generic={0xb, 0xa, "b22a2201fc0286eea5"}, @generic={0xfd, 0x21, "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"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x6, 0x1}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xff, 0x6, 0x5, 0x8, 0x20}, 0x2b, &(0x7f0000000440)={0x5, 0xf, 0x2b, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x81, 0x9, 0x2a6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0xff, 0xff, 0x7ff, 0x25}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0xe4, &(0x7f0000000980)=@string={0xe4, 0x3, "5bf583ee5347f44ebd63565d9dfdcc4bc25d98596981d4aaa172973db401e3e96101f461504b3783ca2a208ed18917386ccf9cb2a6c592429f9565aa4d87ea20a3051a544b09f21beb8bd8d27ae40fb37be477c6baac5294baee1157dcc74944efeae2d40cbed44f415b9dab16203d4a4e618d63e76dd61119f978f4d6c01b8df28d50824172ea357701a268fd5bbba3d4a43bcbf53c008be101a23fbb7e9ccdb0e65a9171f575873e6359de9813438e49249c4f1e69845a049e760e108f004939b02212bf5db2f84dd5b3789546fb48b0e6ae932fa3f9d32e12f2786c54d63baee6"}}, {0xab, &(0x7f0000000a80)=@string={0xab, 0x3, "f24a79d786b873f8327a182c6d99bbb16be3db79413cd394b5a020eb086cc33372920131e1caba6306209fdcab920047f6074e75b4215e7869241b461a989ee6b4f7b77ee95c4b939fb8b5c96865877e7279fade5c8029f973631d057fb0fb131529f8f7537cc9c11929b6b21286c4f2ea27c79da0166f56b8b51cf6eba6e5ee28f2bf9293663177698f93e9998c3f235538d25692faefe8373a32d44d393f57d691a0a395e91e89c4"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x0, 0x30, 0xfe, {0xfe, 0x3, "280008c4cd5ba2f30f4498299a5fad2a41f4330bf129e0f1aed9d30639586dfc2e6a71656fe29d4ad7672ca0d3a0fe8a7782b9b165f1c863938e02e4917d68554f0f5801031ed520bdecaf81950a000048e0d119ca35474a6325a3d75883a615eb4e77da28b272763407736532a768b72cca66001df3a624d7d444e703593bb2425adc0fdebc366db6c650ad7e70526a8ca87db28bca3d31c32a0557609b96b2fe363bcc52e48f8d750b7dfef56e3fc19d7670716d13796e2cb09910a5be61a3b492606e495c8631ec2fbd70fc22990a3f8c0f5d23be186f2e973cac17c1f2b060c722c9ed059cd7d1c0314b8456b01f423a2b0f12e235a3aaed95da"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "e25cce27"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x44f}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000001c0)={0x20, 0x0, 0x1e, "b3109256dd2bc05a0f3e3a0a211442bb4771caac65367b209f33dc7d914e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x14, &(0x7f0000000040)="860c0ee41402bfd3685c72464fac4f2512cc5850") [ 952.115929][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 952.138004][ T14] usb 5-1: USB disconnect, device number 60 [ 952.152897][ T14] ldusb 5-1:0.0: LD USB Device #1 now disconnected 03:10:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000109000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x9, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe00}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010a000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf00}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0xa, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) [ 952.439523][ T3694] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 952.509534][ T3731] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 952.619402][ T14] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 952.779372][ T3731] usb 2-1: Using ep0 maxpacket: 32 [ 952.810288][ T3694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.821586][ T3694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 952.831047][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.842046][ T3694] usb 4-1: config 0 descriptor?? [ 952.869503][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 952.899567][ T3731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 952.989622][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 953.079685][ T3731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 953.088782][ T3731] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 953.098042][ T3731] usb 2-1: Product: syz [ 953.102769][ T3731] usb 2-1: Manufacturer: syz [ 953.107396][ T3731] usb 2-1: SerialNumber: syz [ 953.122373][ T3731] usb 2-1: config 0 descriptor?? [ 953.167690][ T3731] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 953.177295][ T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 953.198617][ T3731] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 953.215485][ T14] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 953.237852][ T14] usb 5-1: Product: syz [ 953.242178][ T14] usb 5-1: Manufacturer: syz [ 953.246812][ T14] usb 5-1: SerialNumber: syz [ 953.253599][ T14] usb 5-1: config 0 descriptor?? [ 953.291461][ T14] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 953.301765][ T14] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 953.315077][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.325664][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.409619][ T3694] usbhid 4-1:0.0: can't add hid device: -71 [ 953.415837][ T3694] usbhid: probe of 4-1:0.0 failed with error -71 [ 953.424488][ T3694] usb 4-1: USB disconnect, device number 89 [ 955.214812][ T3821] usb 5-1: USB disconnect, device number 61 [ 955.223660][ T3821] ldusb 5-1:0.0: LD USB Device #1 now disconnected 03:10:28 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="9d2b014dd64eac14d8262f821c9b5d890fac594e6595033d2b372506f4fbdd7fa53a741fe10aa167fc95383a97da18f3ad4a04c622f6e9f6ea3ff201a32f03a5ead899f96e6d5825f2eb41e1637e04689404a724eec4374df86994a1c29d8cb9ec09a7f9cdf20eb0c40e0168507e4392a1895d22e4f2a117d589a0ead3cfa62cc2cc6b76feb64b3147811b5385cc4911104ba9933b94d65510562b76a484f28aa778e47cbb8d10c0eb10fba138e73aebbbc48a726c0fa448bde7bbf77760c09dc6fb98dba89d2d904c071095863693349f4b497b56261edd90cd31aa461695b01dff4b1c1a52a2126423c3dc0bc7809b0c29", 0xf2) (async) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) (async) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) syz_usb_disconnect(r0) 03:10:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010b000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) 03:10:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1100}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}}}]}]}]}}]}, 0x54}}, 0x0) 03:10:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:10:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xa8a5, 0x4d, 0x1, {0x22, 0xfc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb1, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x40, 0x1, 0x1f, 0x40, 0x1}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x1d, &(0x7f00000002c0)=@string={0x1d, 0x3, "2ebb2215e68f9e5082e6311c331a6e1e8bf5a8d2fb20e4b92f012e"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\b'], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0xe8, &(0x7f0000000080)="86685c72466eac4f2512cc58500000000000591ababbcda46d0f575ffddbcfdc0b83e549f683027b2c221d28e364e53917ad962274ba626cfddabbdaf795c941d96771ffd8f2849648a323455857f6f005f82c4fec50cfdafe6c0f18ffa2fdd15685f2c22322e2dfddb1bdeffe4930444794ff2a589a9774ef85fc9a2b059e58610164204b0ec5b5e49c5c73966bd569b9c3837868033aaf7c6796288b2f190f152671f351253e0b862493910f0f231c0eaca5055a7b13af4d7e253a9de2bb18154e755f6c7a8f8f9a89fc4694491bd86a83f439e4c4c3ee805961281c11285406d7e47a13cc82f6") 03:10:28 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup2(r1, r1) write$char_usb(r2, 0x0, 0x0) [ 958.439526][T13613] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 958.473027][ T3731] usb 2-1: USB disconnect, device number 17 [ 958.497883][T13647] __nla_validate_parse: 10 callbacks suppressed [ 958.497903][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 958.511276][ T3731] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:10:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010f000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 958.543910][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 958.567132][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000110000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 958.627049][T13659] ================================================================== [ 958.635146][T13659] BUG: KASAN: use-after-free in string+0x39c/0x3d0 [ 958.641730][T13659] Read of size 1 at addr ffff8880393f2200 by task udevd/13659 [ 958.643510][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 958.649202][T13659] [ 958.649212][T13659] CPU: 1 PID: 13659 Comm: udevd Not tainted 6.0.0-rc4-syzkaller #0 03:10:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000111000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 958.649238][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 958.649253][T13659] Call Trace: [ 958.649261][T13659] [ 958.649270][T13659] dump_stack_lvl+0xcd/0x134 [ 958.649305][T13659] print_report.cold+0x2ba/0x6e9 [ 958.694624][T13659] ? string+0x39c/0x3d0 [ 958.698820][T13659] kasan_report+0xb1/0x1e0 [ 958.703264][T13659] ? string+0x39c/0x3d0 [ 958.707445][T13659] string+0x39c/0x3d0 [ 958.711447][T13659] ? format_decode+0x230/0xad0 [ 958.716234][T13659] ? ip6_addr_string_sa+0x830/0x830 [ 958.721458][T13659] vsnprintf+0x71b/0x14f0 03:10:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001f0000014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 958.725812][T13659] ? pointer+0x950/0x950 [ 958.730079][T13659] add_uevent_var+0x15d/0x380 [ 958.734854][T13659] ? find_held_lock+0x2d/0x110 [ 958.739653][T13659] ? cleanup_uevent_env+0x40/0x40 [ 958.744699][T13659] ? cache_alloc_refill+0x1e7/0x380 [ 958.749926][T13659] ? lock_downgrade+0x6e0/0x6e0 [ 958.754807][T13659] ? do_raw_spin_lock+0x120/0x2a0 [ 958.759857][T13659] dev_uevent+0x18d/0x770 [ 958.764271][T13659] ? device_get_devnode+0x2b0/0x2b0 [ 958.769489][T13659] ? rcu_read_lock_sched_held+0x3a/0x70 03:10:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100030014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 958.775046][T13659] ? trace_kmalloc+0x32/0x100 [ 958.779748][T13659] ? kmem_cache_alloc_trace+0x278/0x460 [ 958.785319][T13659] uevent_show+0x1b8/0x380 [ 958.789813][T13659] ? get_device_parent+0x590/0x590 [ 958.794957][T13659] dev_attr_show+0x4b/0x90 [ 958.799405][T13659] ? device_match_any+0x10/0x10 [ 958.804282][T13659] sysfs_kf_seq_show+0x219/0x3d0 [ 958.809298][T13659] kernfs_seq_show+0x169/0x1e0 [ 958.814084][T13659] seq_read_iter+0x4f5/0x1280 [ 958.818791][T13659] kernfs_fop_read_iter+0x523/0x710 03:10:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100050014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 958.824014][T13659] vfs_read+0x67d/0x930 [ 958.828194][T13659] ? kernel_read+0x1c0/0x1c0 [ 958.832811][T13659] ? __ct_user_exit+0xff/0x150 [ 958.837589][T13659] ? lock_downgrade+0x6e0/0x6e0 [ 958.842457][T13659] ? up_write+0x470/0x470 [ 958.846806][T13659] ? __fget_light+0x20a/0x270 [ 958.851506][T13659] ksys_read+0x127/0x250 [ 958.855776][T13659] ? vfs_write+0xdd0/0xdd0 [ 958.860228][T13659] ? syscall_enter_from_user_mode+0x22/0xb0 [ 958.866156][T13659] do_syscall_64+0x35/0xb0 [ 958.870607][T13659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 958.876523][T13659] RIP: 0033:0x7fed955258fe [ 958.880959][T13659] Code: c0 e9 e6 fe ff ff 50 48 8d 3d 0e c7 09 00 e8 c9 cf 01 00 66 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 958.886569][ T14] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 958.900573][T13659] RSP: 002b:00007ffd622166c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.900604][T13659] RAX: ffffffffffffffda RBX: 000055658052ac40 RCX: 00007fed955258fe [ 958.900620][T13659] RDX: 0000000000001000 RSI: 000055658053ae70 RDI: 0000000000000008 [ 958.900637][T13659] RBP: 00007fed955f2380 R08: 0000000000000008 R09: 00007fed955f5a60 [ 958.900652][T13659] R10: 0000000000000100 R11: 0000000000000246 R12: 000055658052ac40 [ 958.900667][T13659] R13: 0000000000000d68 R14: 00007fed955f1780 R15: 0000000000000d68 [ 958.900686][T13659] [ 958.908309][ T4840] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 958.916630][T13659] [ 958.916640][T13659] Allocated by task 13654: [ 958.916652][T13659] kasan_save_stack+0x1e/0x40 [ 958.916676][T13659] __kasan_kmalloc+0xa6/0xd0 [ 958.916694][T13659] kmem_cache_alloc_trace+0x25a/0x460 [ 958.988466][T13659] raw_ioctl_init+0x152/0x820 [ 958.993175][T13659] raw_ioctl+0x8ef/0x2740 [ 958.997528][T13659] __x64_sys_ioctl+0x193/0x200 [ 959.002307][T13659] do_syscall_64+0x35/0xb0 [ 959.006719][T13659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 959.012602][T13659] [ 959.014920][T13659] Freed by task 13654: [ 959.018970][T13659] kasan_save_stack+0x1e/0x40 [ 959.023645][T13659] kasan_set_track+0x21/0x30 [ 959.028253][T13659] kasan_set_free_info+0x20/0x30 [ 959.033180][T13659] ____kasan_slab_free+0x13d/0x1a0 [ 959.038286][T13659] kfree+0x173/0x390 [ 959.042196][T13659] dev_free+0x9a/0x700 [ 959.046279][T13659] raw_release+0x219/0x290 [ 959.050747][T13659] __fput+0x277/0x9d0 [ 959.054729][T13659] task_work_run+0xdd/0x1a0 [ 959.059278][T13659] do_exit+0xad5/0x29b0 [ 959.063420][T13659] do_group_exit+0xd2/0x2f0 [ 959.067907][T13659] get_signal+0x238c/0x2610 [ 959.072395][T13659] arch_do_signal_or_restart+0x82/0x2300 [ 959.078039][T13659] exit_to_user_mode_prepare+0x15f/0x250 [ 959.083675][T13659] syscall_exit_to_user_mode+0x19/0x50 [ 959.089125][T13659] do_syscall_64+0x42/0xb0 [ 959.093538][T13659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 959.099449][T13659] [ 959.101772][T13659] The buggy address belongs to the object at ffff8880393f2200 [ 959.101772][T13659] which belongs to the cache kmalloc-32 of size 32 [ 959.115639][T13659] The buggy address is located 0 bytes inside of [ 959.115639][T13659] 32-byte region [ffff8880393f2200, ffff8880393f2220) [ 959.128652][T13659] [ 959.130965][T13659] The buggy address belongs to the physical page: [ 959.137395][T13659] page:ffffea0000e4fc80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880393f2fc1 pfn:0x393f2 [ 959.148847][T13659] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 959.156437][T13659] raw: 00fff00000000200 ffffea0000cd59c8 ffffea0000de4588 ffff888011840100 [ 959.165111][T13659] raw: ffff8880393f2fc1 ffff8880393f2000 0000000100000038 0000000000000000 [ 959.173678][T13659] page dumped because: kasan: bad access detected [ 959.180109][T13659] page_owner tracks the page as allocated [ 959.185826][T13659] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 3644, tgid 3644 (syz-executor.1), ts 927598380984, free_ts 927593851652 [ 959.207542][T13659] get_page_from_freelist+0x109b/0x2ce0 [ 959.213106][T13659] __alloc_pages+0x1c7/0x510 [ 959.217694][T13659] cache_grow_begin+0x75/0x360 [ 959.222469][T13659] cache_alloc_refill+0x27f/0x380 [ 959.227492][T13659] kmem_cache_alloc_node_trace+0x50a/0x570 [ 959.233301][T13659] __kmalloc_node+0x38/0x60 [ 959.237821][T13659] __vmalloc_node_range+0xa36/0x13a0 [ 959.243127][T13659] vzalloc+0x67/0x80 [ 959.247039][T13659] do_arpt_get_ctl+0x5ea/0x8f0 [ 959.251884][T13659] nf_getsockopt+0x72/0xd0 [ 959.256339][T13659] ip_getsockopt+0x164/0x1c0 [ 959.260945][T13659] tcp_getsockopt+0x86/0xd0 [ 959.265443][T13659] __sys_getsockopt+0x216/0x690 [ 959.270291][T13659] __x64_sys_getsockopt+0xba/0x150 [ 959.275420][T13659] do_syscall_64+0x35/0xb0 [ 959.279845][T13659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 959.285730][T13659] page last free stack trace: [ 959.289623][ T4840] usb 5-1: Using ep0 maxpacket: 32 [ 959.290378][T13659] free_pcp_prepare+0x5e4/0xd20 [ 959.300350][T13659] free_unref_page+0x19/0x4d0 [ 959.305048][T13659] tlb_finish_mmu+0x1a3/0x7e0 [ 959.309744][T13659] exit_mmap+0x1d2/0x490 [ 959.314005][T13659] __mmput+0x122/0x4b0 [ 959.318081][T13659] mmput+0x56/0x60 [ 959.321787][T13659] do_exit+0x9e2/0x29b0 [ 959.325928][T13659] do_group_exit+0xd2/0x2f0 [ 959.330421][T13659] get_signal+0x238c/0x2610 [ 959.334917][T13659] arch_do_signal_or_restart+0x82/0x2300 [ 959.340548][T13659] exit_to_user_mode_prepare+0x15f/0x250 [ 959.346208][T13659] syscall_exit_to_user_mode+0x19/0x50 [ 959.351697][T13659] do_syscall_64+0x42/0xb0 [ 959.356103][T13659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 959.361985][T13659] [ 959.364294][T13659] Memory state around the buggy address: [ 959.369903][T13659] ffff8880393f2100: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc 03:10:29 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b00010000000009040000010fc6cbe800090587035148bb088dccea57c4a9752f8288568e389893622d3aeb5472a449447990b5aeeb2f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="18", 0x1) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)={0x40, 0xf, 0x11, {0x11, 0xd, "f8a1c05741edaae37d3d7cbf32f5d9"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000300)={0x0, 0xf, 0x13a, {0x5, 0xf, 0x13a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x4, 0x2, 0x0, 0x6}, @generic={0xe7, 0x10, 0xb, "9d4cc4b08a0ac0a906b1161a0d12e1aca1cbf45399edbf304299691626d13a40f6e975a25f3ee7d0b9345f2d438446f3f5823faf66fa6404a2999b792233de0052ddf62010e2c9ea7c8e3d9de12d535507611aabae0ccfd399f4f3d12d722f2766b6270b8db9455c8df4484a07cc116890fa990c230dc5322b1ac8b4d79b37d4d116626bf1ca4accf02f49ac69babf9f72673ffdd3036cb93f16786c69c96a131b70d277a2f42c9a5177054e0d3debca80294569246c9ce3a8b6fc626aec5bbd65626ca8a0b3c704188f92f485731ea40fb6abe4faef97a6ee018209adbf985b907ee83c"}, @generic={0x43, 0x10, 0x3, "ecad2f13d82957fc90f34fe3d50a768cfebea4a4a3b0b7cd75fa783beefcb5ed6d0542379d4984792e022ba4015bef765fb10a5ff8fbbedc84678f92d2aac893"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa7, 0x80, 0x7, 0x3, "89de56a5", "1a0c06ae"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x23, 0x81, 0x1, 0x6, 0x1ff}}}, &(0x7f0000000900)={0x84, &(0x7f00000004c0)={0x0, 0xa, 0x74, "b55e969579d5d674d7b06fce1398956fdc5e03cd72e7f9817b51bdff41f532a6078b474e5a92d71ca6459d130f81a8cc8dd2c3bf0f7f3c63dc2812e949b24a1c356f1d4d73ef680bd67c3dc14d70867c5401c1578141a55f9fdb80c09a6feccbbf39b1e4465b4f63310592044dd1f323e11576f5"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x1, [0x0]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "9226"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x4d}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="1e3b35625252"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "1574"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) read$char_usb(r1, &(0x7f00000000c0)=""/178, 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a000f00000000000000000081"], 0x1c}}, 0x0) syz_usb_disconnect(r0) 03:10:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100060014000600000000000400000000000000000000010900010053454736000000000800020005000000140005"], 0x50}}, 0x0) [ 959.377988][T13659] ffff8880393f2180: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 959.386069][T13659] >ffff8880393f2200: fa fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 959.394138][T13659] ^ [ 959.398211][T13659] ffff8880393f2280: 00 fc fc fc fc fc fc fc fa fb fb fb fc fc fc fc [ 959.406276][T13659] ffff8880393f2300: 00 fc fc fc fc fc fc fc fa fb fb fb fc fc fc fc [ 959.414321][T13659] ================================================================== [ 959.437987][T13659] Kernel panic - not syncing: panic_on_warn set ... [ 959.444609][T13659] CPU: 1 PID: 13659 Comm: udevd Not tainted 6.0.0-rc4-syzkaller #0 [ 959.452524][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 959.462594][T13659] Call Trace: [ 959.465875][T13659] [ 959.468808][T13659] dump_stack_lvl+0xcd/0x134 [ 959.473414][T13659] panic+0x2c8/0x627 [ 959.477354][T13659] ? panic_print_sys_info.part.0+0x10b/0x10b [ 959.483345][T13659] ? preempt_schedule_common+0x59/0xc0 [ 959.488815][T13659] ? preempt_schedule_thunk+0x16/0x18 [ 959.494199][T13659] ? string+0x39c/0x3d0 [ 959.498359][T13659] end_report.part.0+0x3f/0x7c [ 959.503131][T13659] kasan_report.cold+0xa/0xf [ 959.507727][T13659] ? string+0x39c/0x3d0 [ 959.511908][T13659] string+0x39c/0x3d0 [ 959.515892][T13659] ? format_decode+0x230/0xad0 [ 959.520657][T13659] ? ip6_addr_string_sa+0x830/0x830 [ 959.525859][T13659] vsnprintf+0x71b/0x14f0 [ 959.530191][T13659] ? pointer+0x950/0x950 [ 959.534436][T13659] add_uevent_var+0x15d/0x380 [ 959.539124][T13659] ? find_held_lock+0x2d/0x110 [ 959.543916][T13659] ? cleanup_uevent_env+0x40/0x40 [ 959.548946][T13659] ? cache_alloc_refill+0x1e7/0x380 [ 959.554153][T13659] ? lock_downgrade+0x6e0/0x6e0 [ 959.559009][T13659] ? do_raw_spin_lock+0x120/0x2a0 [ 959.564078][T13659] dev_uevent+0x18d/0x770 [ 959.568435][T13659] ? device_get_devnode+0x2b0/0x2b0 [ 959.573650][T13659] ? rcu_read_lock_sched_held+0x3a/0x70 [ 959.579216][T13659] ? trace_kmalloc+0x32/0x100 [ 959.583908][T13659] ? kmem_cache_alloc_trace+0x278/0x460 [ 959.589462][T13659] uevent_show+0x1b8/0x380 [ 959.593909][T13659] ? get_device_parent+0x590/0x590 [ 959.599040][T13659] dev_attr_show+0x4b/0x90 [ 959.603484][T13659] ? device_match_any+0x10/0x10 [ 959.608353][T13659] sysfs_kf_seq_show+0x219/0x3d0 [ 959.613327][T13659] kernfs_seq_show+0x169/0x1e0 [ 959.618104][T13659] seq_read_iter+0x4f5/0x1280 [ 959.622807][T13659] kernfs_fop_read_iter+0x523/0x710 [ 959.628026][T13659] vfs_read+0x67d/0x930 [ 959.632198][T13659] ? kernel_read+0x1c0/0x1c0 [ 959.636826][T13659] ? __ct_user_exit+0xff/0x150 [ 959.641602][T13659] ? lock_downgrade+0x6e0/0x6e0 [ 959.646467][T13659] ? up_write+0x470/0x470 [ 959.650807][T13659] ? __fget_light+0x20a/0x270 [ 959.655495][T13659] ksys_read+0x127/0x250 [ 959.659747][T13659] ? vfs_write+0xdd0/0xdd0 [ 959.664168][T13659] ? syscall_enter_from_user_mode+0x22/0xb0 [ 959.670072][T13659] do_syscall_64+0x35/0xb0 [ 959.674496][T13659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 959.680395][T13659] RIP: 0033:0x7fed955258fe [ 959.684820][T13659] Code: c0 e9 e6 fe ff ff 50 48 8d 3d 0e c7 09 00 e8 c9 cf 01 00 66 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 959.704434][T13659] RSP: 002b:00007ffd622166c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.712849][T13659] RAX: ffffffffffffffda RBX: 000055658052ac40 RCX: 00007fed955258fe [ 959.720821][T13659] RDX: 0000000000001000 RSI: 000055658053ae70 RDI: 0000000000000008 [ 959.728791][T13659] RBP: 00007fed955f2380 R08: 0000000000000008 R09: 00007fed955f5a60 [ 959.736762][T13659] R10: 0000000000000100 R11: 0000000000000246 R12: 000055658052ac40 [ 959.744735][T13659] R13: 0000000000000d68 R14: 00007fed955f1780 R15: 0000000000000d68 [ 959.752725][T13659] [ 959.755797][T13659] Kernel Offset: disabled [ 959.760117][T13659] Rebooting in 86400 seconds..