hould_failslab+0x115/0x180 [ 2112.002706] should_failslab+0x5/0xf [ 2112.006447] kmem_cache_alloc_trace+0x284/0x380 [ 2112.011133] apparmor_file_alloc_security+0x394/0xad0 [ 2112.016348] ? apparmor_file_receive+0x160/0x160 03:31:24 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb05, 0x0) [ 2112.021112] ? __alloc_file+0x21/0x330 [ 2112.025008] security_file_alloc+0x40/0x90 [ 2112.029249] __alloc_file+0xc9/0x330 [ 2112.032983] alloc_empty_file+0x6d/0x170 [ 2112.037052] path_openat+0xe9/0x2df0 [ 2112.040775] ? __lock_acquire+0x6de/0x3ff0 [ 2112.045019] ? check_preemption_disabled+0x41/0x280 [ 2112.050043] ? path_lookupat+0x8d0/0x8d0 [ 2112.054111] ? mark_held_locks+0xf0/0xf0 [ 2112.058178] ? proc_fail_nth_write+0x95/0x1d0 [ 2112.062684] do_filp_open+0x18c/0x3f0 [ 2112.066496] ? may_open_dev+0xf0/0xf0 [ 2112.070303] ? __alloc_fd+0x28d/0x570 03:31:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000080)={0x3, 0x1}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}}, 0x8) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2112.074113] ? lock_downgrade+0x720/0x720 [ 2112.078262] ? lock_acquire+0x170/0x3c0 [ 2112.082237] ? __alloc_fd+0x34/0x570 [ 2112.085959] ? do_raw_spin_unlock+0x171/0x230 [ 2112.090460] ? _raw_spin_unlock+0x29/0x40 [ 2112.094620] ? __alloc_fd+0x28d/0x570 [ 2112.098442] do_sys_open+0x3b3/0x520 [ 2112.102170] ? filp_open+0x70/0x70 [ 2112.105727] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2112.111100] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2112.116123] ? do_syscall_64+0x21/0x620 [ 2112.120110] do_syscall_64+0xf9/0x620 03:31:24 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb06, 0x0) 03:31:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000040)={0x6, "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"}) [ 2112.123918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2112.129200] RIP: 0033:0x4179b1 [ 2112.132481] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2112.151387] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2112.159100] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2112.166730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 03:31:24 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb07, 0x0) 03:31:24 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:24 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) [ 2112.174002] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2112.181273] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2112.188544] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c 03:31:24 executing program 3 (fault-call:0 fault-nth:4): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:24 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb08, 0x0) 03:31:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:24 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb07, 0xe502) 03:31:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x2, &(0x7f0000000080)) [ 2112.443618] FAULT_INJECTION: forcing a failure. [ 2112.443618] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.478747] CPU: 0 PID: 26724 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2112.486668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2112.496038] Call Trace: [ 2112.498636] dump_stack+0x1fc/0x2fe [ 2112.502274] should_fail.cold+0xa/0x14 [ 2112.506171] ? setup_fault_attr+0x200/0x200 [ 2112.510502] ? lock_acquire+0x170/0x3c0 [ 2112.514487] __should_failslab+0x115/0x180 [ 2112.518729] should_failslab+0x5/0xf [ 2112.522449] kmem_cache_alloc_trace+0x284/0x380 [ 2112.527165] ? releaseintf+0x150/0x150 [ 2112.531060] usbdev_open+0x4e/0x7f0 [ 2112.534689] ? releaseintf+0x150/0x150 [ 2112.538582] chrdev_open+0x266/0x770 [ 2112.542300] ? lockref_get+0x11/0x50 [ 2112.546016] ? __register_chrdev+0x400/0x400 [ 2112.550425] ? check_preemption_disabled+0x41/0x280 [ 2112.555455] do_dentry_open+0x4aa/0x1160 [ 2112.559522] ? __register_chrdev+0x400/0x400 [ 2112.563937] ? inode_permission.part.0+0x10c/0x450 [ 2112.569046] ? chown_common+0x550/0x550 [ 2112.573028] ? inode_permission+0x3d/0x140 [ 2112.577272] path_openat+0x793/0x2df0 [ 2112.581089] ? path_lookupat+0x8d0/0x8d0 [ 2112.585166] ? mark_held_locks+0xf0/0xf0 [ 2112.589244] do_filp_open+0x18c/0x3f0 03:31:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5421, &(0x7f0000000080)) 03:31:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5450, &(0x7f0000000080)) [ 2112.593054] ? may_open_dev+0xf0/0xf0 [ 2112.596868] ? lock_downgrade+0x720/0x720 [ 2112.601027] ? lock_acquire+0x170/0x3c0 [ 2112.605012] ? __alloc_fd+0x34/0x570 [ 2112.608735] ? do_raw_spin_unlock+0x171/0x230 [ 2112.613239] ? _raw_spin_unlock+0x29/0x40 [ 2112.617390] ? __alloc_fd+0x28d/0x570 [ 2112.621201] do_sys_open+0x3b3/0x520 [ 2112.624918] ? filp_open+0x70/0x70 [ 2112.628470] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2112.633847] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2112.638869] ? do_syscall_64+0x21/0x620 [ 2112.642851] do_syscall_64+0xf9/0x620 [ 2112.646664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2112.651854] RIP: 0033:0x4179b1 [ 2112.655047] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2112.673951] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2112.681665] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 03:31:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5451, &(0x7f0000000080)) 03:31:24 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb08, 0xe502) 03:31:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x2, &(0x7f0000000080)) [ 2112.688939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 [ 2112.698555] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2112.705824] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 2112.713101] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c 03:31:24 executing program 3 (fault-call:0 fault-nth:5): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:24 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2) 03:31:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40400) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000140)) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x0, 0x17, 0x0, 0x4, 0x5c, 0xd7, &(0x7f0000000080)="32c16a85a7b47c40314750fa5e7435c536241a560b301bd00af134db9ef0a00858951452dbf2d2df64c0aac4f858b6a31a879bffb2fdca9b32c0a5cd2913265f76fd19b12761011d852d97e91264d63064dfc6397158e0ee7a3c8b40"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5452, &(0x7f0000000080)) 03:31:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5421, &(0x7f0000000080)) 03:31:24 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb10, 0xe502) 03:31:25 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3) 03:31:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5460, &(0x7f0000000080)) [ 2112.909958] FAULT_INJECTION: forcing a failure. [ 2112.909958] name failslab, interval 1, probability 0, space 0, times 0 03:31:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5450, &(0x7f0000000080)) [ 2112.967867] CPU: 0 PID: 26757 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2112.975916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2112.985270] Call Trace: [ 2112.987878] dump_stack+0x1fc/0x2fe [ 2112.991518] should_fail.cold+0xa/0x14 [ 2112.995414] ? setup_fault_attr+0x200/0x200 [ 2112.999756] __should_failslab+0x115/0x180 [ 2113.004003] should_failslab+0x5/0xf [ 2113.007726] kmem_cache_alloc_trace+0x284/0x380 [ 2113.012399] ? __mutex_add_waiter+0x160/0x160 [ 2113.016902] usb_control_msg+0xb9/0x4a0 [ 2113.020885] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2113.025394] hub_ext_port_status+0x112/0x4b0 [ 2113.029817] hub_activate+0x515/0x19b0 [ 2113.033717] ? hub_port_logical_disconnect+0x170/0x170 [ 2113.039084] ? ktio+0xae0/0x2090 [ 2113.042456] ? lock_downgrade+0x720/0x720 [ 2113.046613] ? trace_hardirqs_off+0x64/0x200 [ 2113.051043] hub_resume+0xa5/0x3b0 [ 2113.054591] ? hub_reset_resume+0x80/0x80 [ 2113.058744] ? usb_hcd_get_frame_number+0xf0/0xf0 03:31:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5451, &(0x7f0000000080)) [ 2113.063601] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2113.069339] usb_resume_both+0x26b/0x840 [ 2113.073411] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 2113.079431] ? _raw_spin_unlock_irq+0x24/0x80 [ 2113.083938] __rpm_callback+0x1ee/0x830 [ 2113.087919] ? usb_runtime_suspend+0x140/0x140 [ 2113.092504] ? __pm_runtime_resume+0x170/0x170 [ 2113.097093] ? lock_acquire+0x170/0x3c0 [ 2113.101073] ? rpm_resume+0x892/0x1bd0 [ 2113.104970] ? usb_runtime_suspend+0x140/0x140 [ 2113.109553] rpm_callback+0x18f/0x230 [ 2113.113365] ? usb_runtime_suspend+0x140/0x140 [ 2113.117953] rpm_resume+0x121c/0x1bd0 [ 2113.121772] ? pm_runtime_autosuspend_expiration+0x1c0/0x1c0 [ 2113.127581] ? lock_acquire+0x170/0x3c0 [ 2113.131564] ? __pm_runtime_resume+0xa9/0x170 [ 2113.136243] ? do_raw_spin_lock+0xcb/0x220 [ 2113.140495] __pm_runtime_resume+0xb7/0x170 [ 2113.144831] usb_autoresume_device+0x1e/0x60 [ 2113.149246] usbdev_open+0x1ab/0x7f0 [ 2113.152994] ? releaseintf+0x150/0x150 [ 2113.156888] chrdev_open+0x266/0x770 [ 2113.160606] ? lockref_get+0x11/0x50 [ 2113.164320] ? __register_chrdev+0x400/0x400 03:31:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5452, &(0x7f0000000080)) [ 2113.168737] ? check_preemption_disabled+0x41/0x280 [ 2113.173772] do_dentry_open+0x4aa/0x1160 [ 2113.177841] ? __register_chrdev+0x400/0x400 [ 2113.182258] ? inode_permission.part.0+0x10c/0x450 [ 2113.187193] ? chown_common+0x550/0x550 [ 2113.191175] ? inode_permission+0x3d/0x140 [ 2113.195423] path_openat+0x793/0x2df0 [ 2113.199241] ? path_lookupat+0x8d0/0x8d0 [ 2113.203307] ? mark_held_locks+0xf0/0xf0 [ 2113.207382] do_filp_open+0x18c/0x3f0 [ 2113.211187] ? may_open_dev+0xf0/0xf0 [ 2113.215001] ? lock_downgrade+0x720/0x720 [ 2113.219153] ? lock_acquire+0x170/0x3c0 [ 2113.223133] ? __alloc_fd+0x34/0x570 [ 2113.226857] ? do_raw_spin_unlock+0x171/0x230 [ 2113.231363] ? _raw_spin_unlock+0x29/0x40 [ 2113.235511] ? __alloc_fd+0x28d/0x570 [ 2113.239324] do_sys_open+0x3b3/0x520 [ 2113.243047] ? filp_open+0x70/0x70 [ 2113.246591] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2113.251962] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2113.256984] ? do_syscall_64+0x21/0x620 [ 2113.260971] do_syscall_64+0xf9/0x620 [ 2113.264773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2113.269961] RIP: 0033:0x4179b1 [ 2113.273152] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2113.292055] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2113.299768] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2113.307034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 03:31:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5460, &(0x7f0000000080)) [ 2113.314306] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2113.321577] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000005 [ 2113.328850] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2113.352555] hub 9-0:1.0: hub_ext_port_status failed (err = -12) 03:31:25 executing program 3 (fault-call:0 fault-nth:6): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x550b, &(0x7f0000000080)) 03:31:25 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:25 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe503) 03:31:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x550b, &(0x7f0000000080)) 03:31:25 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4) [ 2113.482038] FAULT_INJECTION: forcing a failure. [ 2113.482038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2113.483893] FAULT_INJECTION: forcing a failure. [ 2113.483893] name failslab, interval 1, probability 0, space 0, times 0 03:31:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5514, &(0x7f0000000080)) [ 2113.525661] CPU: 0 PID: 26800 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2113.533566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2113.542935] Call Trace: [ 2113.545527] dump_stack+0x1fc/0x2fe [ 2113.549153] should_fail.cold+0xa/0x14 [ 2113.553038] ? lock_acquire+0x170/0x3c0 [ 2113.557019] ? setup_fault_attr+0x200/0x200 [ 2113.561360] __should_failslab+0x115/0x180 [ 2113.565618] should_failslab+0x5/0xf [ 2113.569327] __kmalloc+0x2ab/0x3c0 [ 2113.572864] ? usb_alloc_urb+0x20/0x50 [ 2113.576758] usb_alloc_urb+0x20/0x50 [ 2113.580481] usb_control_msg+0x1c9/0x4a0 [ 2113.584550] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2113.589057] hub_ext_port_status+0x112/0x4b0 [ 2113.593472] hub_activate+0x515/0x19b0 [ 2113.597369] ? hub_port_logical_disconnect+0x170/0x170 [ 2113.602648] ? ktio+0xae0/0x2090 [ 2113.606014] ? lock_downgrade+0x720/0x720 [ 2113.610180] ? trace_hardirqs_off+0x64/0x200 [ 2113.614594] hub_resume+0xa5/0x3b0 [ 2113.618140] ? hub_reset_resume+0x80/0x80 [ 2113.622293] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 2113.627148] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2113.632858] usb_resume_both+0x26b/0x840 [ 2113.636913] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 2113.642812] ? _raw_spin_unlock_irq+0x24/0x80 [ 2113.647300] __rpm_callback+0x1ee/0x830 [ 2113.651272] ? usb_runtime_suspend+0x140/0x140 [ 2113.655847] ? __pm_runtime_resume+0x170/0x170 [ 2113.660434] ? lock_acquire+0x170/0x3c0 [ 2113.664402] ? rpm_resume+0x892/0x1bd0 [ 2113.668280] ? usb_runtime_suspend+0x140/0x140 [ 2113.672850] rpm_callback+0x18f/0x230 [ 2113.676642] ? usb_runtime_suspend+0x140/0x140 [ 2113.681217] rpm_resume+0x121c/0x1bd0 [ 2113.685017] ? pm_runtime_autosuspend_expiration+0x1c0/0x1c0 [ 2113.690815] ? lock_acquire+0x170/0x3c0 [ 2113.694782] ? __pm_runtime_resume+0xa9/0x170 [ 2113.699267] ? do_raw_spin_lock+0xcb/0x220 [ 2113.703498] __pm_runtime_resume+0xb7/0x170 [ 2113.707817] usb_autoresume_device+0x1e/0x60 [ 2113.712218] usbdev_open+0x1ab/0x7f0 [ 2113.715927] ? releaseintf+0x150/0x150 [ 2113.719799] chrdev_open+0x266/0x770 [ 2113.723501] ? lockref_get+0x11/0x50 [ 2113.727210] ? __register_chrdev+0x400/0x400 [ 2113.731612] ? check_preemption_disabled+0x41/0x280 [ 2113.736634] do_dentry_open+0x4aa/0x1160 [ 2113.740691] ? __register_chrdev+0x400/0x400 [ 2113.745096] ? inode_permission.part.0+0x10c/0x450 [ 2113.750019] ? chown_common+0x550/0x550 [ 2113.753998] ? inode_permission+0x3d/0x140 [ 2113.758244] path_openat+0x793/0x2df0 [ 2113.762064] ? path_lookupat+0x8d0/0x8d0 [ 2113.766133] ? mark_held_locks+0xf0/0xf0 [ 2113.770209] do_filp_open+0x18c/0x3f0 [ 2113.774018] ? may_open_dev+0xf0/0xf0 [ 2113.777833] ? lock_downgrade+0x720/0x720 [ 2113.782014] ? lock_acquire+0x170/0x3c0 [ 2113.785994] ? __alloc_fd+0x34/0x570 [ 2113.789719] ? do_raw_spin_unlock+0x171/0x230 [ 2113.794224] ? _raw_spin_unlock+0x29/0x40 [ 2113.798370] ? __alloc_fd+0x28d/0x570 [ 2113.802192] do_sys_open+0x3b3/0x520 [ 2113.805909] ? filp_open+0x70/0x70 [ 2113.809461] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2113.814827] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2113.819844] ? do_syscall_64+0x21/0x620 [ 2113.823821] do_syscall_64+0xf9/0x620 [ 2113.827624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2113.832801] RIP: 0033:0x4179b1 [ 2113.835991] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2113.854888] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2113.862591] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2113.869847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 [ 2113.877123] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2113.884378] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 [ 2113.891639] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2113.898928] CPU: 1 PID: 26799 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2113.906835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2113.916194] Call Trace: [ 2113.917249] hub 9-0:1.0: hub_ext_port_status failed (err = -12) [ 2113.918789] dump_stack+0x1fc/0x2fe [ 2113.918812] should_fail.cold+0xa/0x14 [ 2113.918827] ? lock_acquire+0x170/0x3c0 [ 2113.918839] ? setup_fault_attr+0x200/0x200 [ 2113.918863] __alloc_pages_nodemask+0x239/0x2890 [ 2113.945401] ? mark_held_locks+0xf0/0xf0 [ 2113.949492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2113.954351] ? lock_downgrade+0x720/0x720 [ 2113.958498] ? lock_acquire+0x170/0x3c0 [ 2113.962480] ? __might_fault+0xef/0x1d0 [ 2113.966470] alloc_pages_current+0x193/0x2a0 [ 2113.970887] __get_free_pages+0x8/0x40 [ 2113.974779] proc_control+0x18c/0x7f0 [ 2113.978591] ? proc_do_submiturb+0x3af0/0x3af0 [ 2113.983183] ? _kstrtoull+0x186/0x420 [ 2113.986994] ? _parse_integer+0x180/0x180 [ 2113.991153] usbdev_do_ioctl+0x13ad/0x3030 [ 2113.995402] ? proc_bulk+0x860/0x860 [ 2113.999125] ? __lock_acquire+0x6de/0x3ff0 [ 2114.003378] ? get_pid_task+0xf4/0x190 [ 2114.007276] ? mark_held_locks+0xf0/0xf0 [ 2114.011340] ? proc_fail_nth_write+0x95/0x1d0 [ 2114.011438] FAULT_INJECTION: forcing a failure. [ 2114.011438] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.015835] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2114.015862] ? usbdev_compat_ioctl+0x30/0x30 [ 2114.015878] usbdev_ioctl+0x21/0x30 [ 2114.015898] do_vfs_ioctl+0xcdb/0x12e0 [ 2114.043953] ? lock_downgrade+0x720/0x720 [ 2114.048106] ? check_preemption_disabled+0x41/0x280 [ 2114.053127] ? ioctl_preallocate+0x200/0x200 [ 2114.057634] ? __fget+0x356/0x510 [ 2114.061088] ? do_dup2+0x450/0x450 [ 2114.064621] ? vfs_write+0x393/0x540 [ 2114.068324] ? fput+0x2b/0x190 [ 2114.071509] ksys_ioctl+0x9b/0xc0 [ 2114.074964] __x64_sys_ioctl+0x6f/0xb0 [ 2114.078847] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2114.083420] do_syscall_64+0xf9/0x620 [ 2114.087224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2114.092398] RIP: 0033:0x45deb9 [ 2114.095577] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2114.114465] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:31:25 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x7) 03:31:26 executing program 3 (fault-call:0 fault-nth:7): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) [ 2114.122161] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2114.130461] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2114.137850] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2114.145117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2114.152375] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c [ 2114.159648] CPU: 0 PID: 26816 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2114.167533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:31:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5514, &(0x7f0000000080)) 03:31:26 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe504) [ 2114.176893] Call Trace: [ 2114.179487] dump_stack+0x1fc/0x2fe [ 2114.183127] should_fail.cold+0xa/0x14 [ 2114.187021] ? setup_fault_attr+0x200/0x200 [ 2114.191344] ? lock_acquire+0x170/0x3c0 [ 2114.195333] __should_failslab+0x115/0x180 [ 2114.199655] should_failslab+0x5/0xf [ 2114.203366] __kmalloc+0x2ab/0x3c0 [ 2114.206910] ? usb_hcd_submit_urb+0x656/0x23c0 [ 2114.211511] usb_hcd_submit_urb+0x656/0x23c0 [ 2114.215926] ? kasan_kmalloc+0x139/0x160 [ 2114.219994] ? unlink1+0x500/0x500 [ 2114.223553] ? hub_ext_port_status+0x112/0x4b0 03:31:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x551f, &(0x7f0000000080)) [ 2114.228133] ? hub_activate+0x515/0x19b0 [ 2114.232194] ? hub_resume+0xa5/0x3b0 [ 2114.235917] ? usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2114.241803] ? usb_resume_both+0x26b/0x840 [ 2114.246041] ? __rpm_callback+0x1ee/0x830 [ 2114.250195] ? rpm_callback+0x18f/0x230 [ 2114.254169] ? rpm_resume+0x121c/0x1bd0 [ 2114.258149] ? __pm_runtime_resume+0xb7/0x170 [ 2114.262661] ? usb_autoresume_device+0x1e/0x60 [ 2114.267243] ? usbdev_open+0x1ab/0x7f0 [ 2114.271128] ? chrdev_open+0x266/0x770 03:31:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550c, &(0x7f0000000080)) [ 2114.275020] ? do_dentry_open+0x4aa/0x1160 [ 2114.279265] ? path_openat+0x793/0x2df0 [ 2114.283256] ? do_filp_open+0x18c/0x3f0 [ 2114.287231] ? do_sys_open+0x3b3/0x520 [ 2114.291121] ? do_syscall_64+0xf9/0x620 [ 2114.295188] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2114.300560] ? do_syscall_64+0xf9/0x620 [ 2114.304538] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2114.309906] ? __lock_acquire+0x6de/0x3ff0 [ 2114.314148] usb_submit_urb+0xb2f/0x13b0 [ 2114.318223] usb_start_wait_urb+0x108/0x4c0 [ 2114.322552] ? setup_fault_attr+0x200/0x200 [ 2114.326885] ? usb_api_blocking_completion+0xa0/0xa0 [ 2114.332002] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2114.337027] ? memset+0x20/0x40 [ 2114.340326] usb_control_msg+0x31c/0x4a0 [ 2114.344396] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2114.348903] hub_ext_port_status+0x112/0x4b0 [ 2114.353321] hub_activate+0x515/0x19b0 [ 2114.357228] ? hub_port_logical_disconnect+0x170/0x170 [ 2114.362517] ? ktio+0xae0/0x2090 [ 2114.365892] ? lock_downgrade+0x720/0x720 [ 2114.370057] ? trace_hardirqs_off+0x64/0x200 [ 2114.374474] hub_resume+0xa5/0x3b0 03:31:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x551f, &(0x7f0000000080)) [ 2114.378023] ? hub_reset_resume+0x80/0x80 [ 2114.382179] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 2114.387031] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2114.392757] usb_resume_both+0x26b/0x840 [ 2114.396829] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 2114.402722] ? _raw_spin_unlock_irq+0x24/0x80 [ 2114.407227] __rpm_callback+0x1ee/0x830 [ 2114.411206] ? usb_runtime_suspend+0x140/0x140 [ 2114.415792] ? __pm_runtime_resume+0x170/0x170 [ 2114.420385] ? lock_acquire+0x170/0x3c0 [ 2114.424362] ? rpm_resume+0x892/0x1bd0 [ 2114.428255] ? usb_runtime_suspend+0x140/0x140 [ 2114.432989] rpm_callback+0x18f/0x230 [ 2114.436799] ? usb_runtime_suspend+0x140/0x140 [ 2114.441389] rpm_resume+0x121c/0x1bd0 [ 2114.445204] ? pm_runtime_autosuspend_expiration+0x1c0/0x1c0 [ 2114.451011] ? lock_acquire+0x170/0x3c0 [ 2114.454994] ? __pm_runtime_resume+0xa9/0x170 [ 2114.459498] ? do_raw_spin_lock+0xcb/0x220 [ 2114.463738] __pm_runtime_resume+0xb7/0x170 [ 2114.468071] usb_autoresume_device+0x1e/0x60 [ 2114.472484] usbdev_open+0x1ab/0x7f0 [ 2114.476207] ? releaseintf+0x150/0x150 [ 2114.480105] chrdev_open+0x266/0x770 [ 2114.483820] ? lockref_get+0x11/0x50 [ 2114.487533] ? __register_chrdev+0x400/0x400 [ 2114.491945] ? check_preemption_disabled+0x41/0x280 [ 2114.496970] do_dentry_open+0x4aa/0x1160 [ 2114.501123] ? __register_chrdev+0x400/0x400 [ 2114.505539] ? inode_permission.part.0+0x10c/0x450 [ 2114.510490] ? chown_common+0x550/0x550 [ 2114.514472] ? inode_permission+0x3d/0x140 [ 2114.518720] path_openat+0x793/0x2df0 [ 2114.522535] ? path_lookupat+0x8d0/0x8d0 [ 2114.526602] ? mark_held_locks+0xf0/0xf0 [ 2114.530679] do_filp_open+0x18c/0x3f0 [ 2114.534485] ? may_open_dev+0xf0/0xf0 [ 2114.538297] ? lock_downgrade+0x720/0x720 [ 2114.542450] ? lock_acquire+0x170/0x3c0 [ 2114.546428] ? __alloc_fd+0x34/0x570 [ 2114.550152] ? do_raw_spin_unlock+0x171/0x230 [ 2114.554654] ? _raw_spin_unlock+0x29/0x40 [ 2114.558804] ? __alloc_fd+0x28d/0x570 [ 2114.562616] do_sys_open+0x3b3/0x520 [ 2114.566335] ? filp_open+0x70/0x70 [ 2114.569884] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2114.575254] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2114.580294] ? do_syscall_64+0x21/0x620 [ 2114.584278] do_syscall_64+0xf9/0x620 [ 2114.588075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2114.593247] RIP: 0033:0x4179b1 [ 2114.596431] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2114.615399] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2114.623088] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2114.630347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 [ 2114.637606] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2114.644855] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000007 [ 2114.652117] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2114.664142] hub 9-0:1.0: hub_ext_port_status failed (err = -12) 03:31:26 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550c, &(0x7f0000000080)) 03:31:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550d, &(0x7f0000000080)) 03:31:26 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x300) 03:31:26 executing program 3 (fault-call:0 fault-nth:8): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:26 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe507) 03:31:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004551e, &(0x7f0000000080)) [ 2114.791240] FAULT_INJECTION: forcing a failure. [ 2114.791240] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.806249] FAULT_INJECTION: forcing a failure. [ 2114.806249] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.839002] CPU: 1 PID: 26851 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2114.846988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2114.856340] Call Trace: [ 2114.858935] dump_stack+0x1fc/0x2fe [ 2114.862585] should_fail.cold+0xa/0x14 [ 2114.866474] ? setup_fault_attr+0x200/0x200 [ 2114.870819] __should_failslab+0x115/0x180 [ 2114.875054] should_failslab+0x5/0xf [ 2114.878756] kmem_cache_alloc_trace+0x284/0x380 [ 2114.883415] ? __mutex_add_waiter+0x160/0x160 [ 2114.887951] usb_control_msg+0xb9/0x4a0 [ 2114.891919] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2114.896415] ? wait_for_completion_io+0x10/0x10 [ 2114.901082] hub_ext_port_status+0x112/0x4b0 [ 2114.905485] hub_activate+0x515/0x19b0 [ 2114.909370] ? hub_port_logical_disconnect+0x170/0x170 [ 2114.914648] ? ktio+0xae0/0x2090 [ 2114.918003] ? lock_downgrade+0x720/0x720 [ 2114.922140] ? trace_hardirqs_off+0x64/0x200 [ 2114.926549] hub_resume+0xa5/0x3b0 [ 2114.930095] ? hub_reset_resume+0x80/0x80 [ 2114.934244] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 2114.939081] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2114.944783] usb_resume_both+0x26b/0x840 [ 2114.948838] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 2114.955245] ? _raw_spin_unlock_irq+0x24/0x80 [ 2114.959730] __rpm_callback+0x1ee/0x830 [ 2114.963691] ? usb_runtime_suspend+0x140/0x140 [ 2114.968265] ? __pm_runtime_resume+0x170/0x170 [ 2114.972839] ? lock_acquire+0x170/0x3c0 [ 2114.976820] ? rpm_resume+0x892/0x1bd0 [ 2114.980694] ? usb_runtime_suspend+0x140/0x140 [ 2114.985261] rpm_callback+0x18f/0x230 [ 2114.989051] ? usb_runtime_suspend+0x140/0x140 [ 2114.993628] rpm_resume+0x121c/0x1bd0 [ 2114.997424] ? pm_runtime_autosuspend_expiration+0x1c0/0x1c0 [ 2115.003208] ? lock_acquire+0x170/0x3c0 [ 2115.007169] ? __pm_runtime_resume+0xa9/0x170 [ 2115.011653] ? do_raw_spin_lock+0xcb/0x220 [ 2115.015967] __pm_runtime_resume+0xb7/0x170 [ 2115.020278] usb_autoresume_device+0x1e/0x60 [ 2115.024673] usbdev_open+0x1ab/0x7f0 [ 2115.028397] ? releaseintf+0x150/0x150 [ 2115.032274] chrdev_open+0x266/0x770 [ 2115.035981] ? lockref_get+0x11/0x50 [ 2115.039681] ? __register_chrdev+0x400/0x400 [ 2115.044090] ? check_preemption_disabled+0x41/0x280 [ 2115.049117] do_dentry_open+0x4aa/0x1160 [ 2115.053164] ? __register_chrdev+0x400/0x400 [ 2115.057562] ? inode_permission.part.0+0x10c/0x450 [ 2115.062483] ? chown_common+0x550/0x550 [ 2115.066452] ? inode_permission+0x3d/0x140 [ 2115.070684] path_openat+0x793/0x2df0 [ 2115.074485] ? path_lookupat+0x8d0/0x8d0 [ 2115.078538] ? mark_held_locks+0xf0/0xf0 [ 2115.082593] do_filp_open+0x18c/0x3f0 [ 2115.086394] ? may_open_dev+0xf0/0xf0 [ 2115.090187] ? lock_downgrade+0x720/0x720 [ 2115.094319] ? lock_acquire+0x170/0x3c0 [ 2115.098283] ? __alloc_fd+0x34/0x570 [ 2115.102005] ? do_raw_spin_unlock+0x171/0x230 [ 2115.106514] ? _raw_spin_unlock+0x29/0x40 [ 2115.110653] ? __alloc_fd+0x28d/0x570 [ 2115.114452] do_sys_open+0x3b3/0x520 [ 2115.118174] ? filp_open+0x70/0x70 [ 2115.121710] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2115.127240] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2115.132245] ? do_syscall_64+0x21/0x620 [ 2115.136208] do_syscall_64+0xf9/0x620 [ 2115.140008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2115.145190] RIP: 0033:0x4179b1 [ 2115.148375] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2115.167267] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2115.174980] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2115.182251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 03:31:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40049409, &(0x7f0000000080)) [ 2115.189510] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2115.196775] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000008 [ 2115.204042] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2115.211345] CPU: 0 PID: 26852 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2115.219231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2115.228586] Call Trace: [ 2115.231185] dump_stack+0x1fc/0x2fe [ 2115.234829] should_fail.cold+0xa/0x14 [ 2115.238857] ? setup_fault_attr+0x200/0x200 [ 2115.243194] __should_failslab+0x115/0x180 [ 2115.247433] should_failslab+0x5/0xf [ 2115.251153] kmem_cache_alloc_trace+0x284/0x380 [ 2115.255831] usb_control_msg+0xb9/0x4a0 [ 2115.259817] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2115.264319] ? wait_for_completion_io+0x10/0x10 [ 2115.265509] hub 9-0:1.0: hub_ext_port_status failed (err = -12) [ 2115.268991] proc_control+0x322/0x7f0 [ 2115.269012] ? proc_do_submiturb+0x3af0/0x3af0 [ 2115.269030] ? _kstrtoull+0x186/0x420 [ 2115.269045] ? _parse_integer+0x180/0x180 [ 2115.291389] usbdev_do_ioctl+0x13ad/0x3030 [ 2115.295635] ? proc_bulk+0x860/0x860 [ 2115.299354] ? __lock_acquire+0x6de/0x3ff0 [ 2115.303609] ? get_pid_task+0xf4/0x190 [ 2115.307501] ? mark_held_locks+0xf0/0xf0 [ 2115.311569] ? proc_fail_nth_write+0x95/0x1d0 [ 2115.316067] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2115.321008] ? usbdev_compat_ioctl+0x30/0x30 [ 2115.325424] usbdev_ioctl+0x21/0x30 [ 2115.329062] do_vfs_ioctl+0xcdb/0x12e0 [ 2115.332957] ? lock_downgrade+0x720/0x720 [ 2115.337106] ? check_preemption_disabled+0x41/0x280 03:31:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550c, &(0x7f0000000080)) [ 2115.342128] ? ioctl_preallocate+0x200/0x200 [ 2115.346548] ? __fget+0x356/0x510 [ 2115.350011] ? do_dup2+0x450/0x450 [ 2115.353554] ? vfs_write+0x393/0x540 [ 2115.357293] ? fput+0x2b/0x190 [ 2115.360506] ksys_ioctl+0x9b/0xc0 [ 2115.363967] __x64_sys_ioctl+0x6f/0xb0 [ 2115.367867] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2115.372458] do_syscall_64+0xf9/0x620 [ 2115.376264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2115.381455] RIP: 0033:0x45deb9 [ 2115.384650] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2115.403990] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2115.412050] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2115.419314] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2115.426604] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2115.433856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:31:27 executing program 3 (fault-call:0 fault-nth:9): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) [ 2115.441106] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c [ 2115.480662] FAULT_INJECTION: forcing a failure. [ 2115.480662] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.497792] CPU: 0 PID: 26869 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2115.505699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2115.515065] Call Trace: [ 2115.517661] dump_stack+0x1fc/0x2fe [ 2115.521298] should_fail.cold+0xa/0x14 [ 2115.525194] ? lock_acquire+0x170/0x3c0 03:31:27 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe508) [ 2115.529175] ? setup_fault_attr+0x200/0x200 [ 2115.533515] __should_failslab+0x115/0x180 [ 2115.537753] should_failslab+0x5/0xf [ 2115.541467] __kmalloc+0x2ab/0x3c0 [ 2115.545010] ? usb_alloc_urb+0x20/0x50 [ 2115.548898] usb_alloc_urb+0x20/0x50 [ 2115.552620] usb_control_msg+0x1c9/0x4a0 [ 2115.556690] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2115.561192] ? wait_for_completion_io+0x10/0x10 [ 2115.565870] hub_ext_port_status+0x112/0x4b0 [ 2115.570291] hub_activate+0x515/0x19b0 [ 2115.574189] ? hub_port_logical_disconnect+0x170/0x170 03:31:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550d, &(0x7f0000000080)) [ 2115.579459] ? ktio+0xae0/0x2090 [ 2115.582827] ? lock_downgrade+0x720/0x720 [ 2115.586982] ? trace_hardirqs_off+0x64/0x200 [ 2115.591400] hub_resume+0xa5/0x3b0 [ 2115.594950] ? hub_reset_resume+0x80/0x80 [ 2115.599104] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 2115.603961] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2115.609681] usb_resume_both+0x26b/0x840 [ 2115.613753] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 2115.619649] ? _raw_spin_unlock_irq+0x24/0x80 [ 2115.624157] __rpm_callback+0x1ee/0x830 [ 2115.628145] ? usb_runtime_suspend+0x140/0x140 [ 2115.632732] ? __pm_runtime_resume+0x170/0x170 [ 2115.637316] ? lock_acquire+0x170/0x3c0 [ 2115.641296] ? rpm_resume+0x892/0x1bd0 [ 2115.645191] ? usb_runtime_suspend+0x140/0x140 [ 2115.649772] rpm_callback+0x18f/0x230 [ 2115.653575] ? usb_runtime_suspend+0x140/0x140 [ 2115.658162] rpm_resume+0x121c/0x1bd0 [ 2115.661978] ? pm_runtime_autosuspend_expiration+0x1c0/0x1c0 [ 2115.667782] ? lock_acquire+0x170/0x3c0 [ 2115.671764] ? __pm_runtime_resume+0xa9/0x170 [ 2115.676266] ? do_raw_spin_lock+0xcb/0x220 [ 2115.680514] __pm_runtime_resume+0xb7/0x170 [ 2115.684860] usb_autoresume_device+0x1e/0x60 [ 2115.689273] usbdev_open+0x1ab/0x7f0 [ 2115.692992] ? releaseintf+0x150/0x150 [ 2115.696874] chrdev_open+0x266/0x770 [ 2115.700574] ? lockref_get+0x11/0x50 [ 2115.704269] ? __register_chrdev+0x400/0x400 [ 2115.708657] ? check_preemption_disabled+0x41/0x280 [ 2115.713673] do_dentry_open+0x4aa/0x1160 [ 2115.717724] ? __register_chrdev+0x400/0x400 [ 2115.722119] ? inode_permission.part.0+0x10c/0x450 [ 2115.727033] ? chown_common+0x550/0x550 [ 2115.730999] ? inode_permission+0x3d/0x140 [ 2115.735228] path_openat+0x793/0x2df0 [ 2115.739014] ? path_lookupat+0x8d0/0x8d0 [ 2115.743059] ? mark_held_locks+0xf0/0xf0 [ 2115.747108] do_filp_open+0x18c/0x3f0 [ 2115.750899] ? may_open_dev+0xf0/0xf0 [ 2115.754708] ? lock_downgrade+0x720/0x720 [ 2115.758843] ? lock_acquire+0x170/0x3c0 [ 2115.762811] ? __alloc_fd+0x34/0x570 [ 2115.766513] ? do_raw_spin_unlock+0x171/0x230 [ 2115.771005] ? _raw_spin_unlock+0x29/0x40 [ 2115.775153] ? __alloc_fd+0x28d/0x570 [ 2115.778945] do_sys_open+0x3b3/0x520 [ 2115.782651] ? filp_open+0x70/0x70 [ 2115.786191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2115.791549] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2115.796568] ? do_syscall_64+0x21/0x620 [ 2115.800524] do_syscall_64+0xf9/0x620 [ 2115.804306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2115.809475] RIP: 0033:0x4179b1 [ 2115.812659] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 03:31:27 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004551e, &(0x7f0000000080)) 03:31:27 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x700) [ 2115.831555] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2115.839292] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2115.846546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 [ 2115.853810] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2115.861073] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000009 [ 2115.868348] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2115.894818] hub 9-0:1.0: hub_ext_port_status failed (err = -12) 03:31:28 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe510) 03:31:28 executing program 3 (fault-call:0 fault-nth:10): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40049409, &(0x7f0000000080)) [ 2115.958712] FAULT_INJECTION: forcing a failure. [ 2115.958712] name failslab, interval 1, probability 0, space 0, times 0 03:31:28 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3f00) [ 2116.011705] CPU: 0 PID: 26887 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2116.019616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2116.028971] Call Trace: [ 2116.031569] dump_stack+0x1fc/0x2fe [ 2116.035211] should_fail.cold+0xa/0x14 [ 2116.039108] ? setup_fault_attr+0x200/0x200 [ 2116.043443] __should_failslab+0x115/0x180 [ 2116.047685] should_failslab+0x5/0xf [ 2116.051399] __kmalloc+0x2ab/0x3c0 [ 2116.054943] ? usb_alloc_urb+0x20/0x50 [ 2116.058857] usb_alloc_urb+0x20/0x50 [ 2116.062582] usb_control_msg+0x1c9/0x4a0 [ 2116.066651] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2116.071155] ? wait_for_completion_io+0x10/0x10 [ 2116.075841] proc_control+0x322/0x7f0 [ 2116.079667] ? proc_do_submiturb+0x3af0/0x3af0 [ 2116.084258] ? _kstrtoull+0x186/0x420 [ 2116.088068] ? _parse_integer+0x180/0x180 [ 2116.092223] usbdev_do_ioctl+0x13ad/0x3030 [ 2116.096470] ? proc_bulk+0x860/0x860 [ 2116.100191] ? __lock_acquire+0x6de/0x3ff0 [ 2116.104444] ? get_pid_task+0xf4/0x190 [ 2116.108339] ? mark_held_locks+0xf0/0xf0 03:31:28 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4d00b) [ 2116.112404] ? proc_fail_nth_write+0x95/0x1d0 [ 2116.116903] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2116.121850] ? usbdev_compat_ioctl+0x30/0x30 [ 2116.126266] usbdev_ioctl+0x21/0x30 [ 2116.129898] do_vfs_ioctl+0xcdb/0x12e0 [ 2116.133798] ? lock_downgrade+0x720/0x720 [ 2116.137955] ? check_preemption_disabled+0x41/0x280 [ 2116.142980] ? ioctl_preallocate+0x200/0x200 [ 2116.147397] ? __fget+0x356/0x510 [ 2116.150859] ? do_dup2+0x450/0x450 [ 2116.154403] ? vfs_write+0x393/0x540 [ 2116.156774] FAULT_INJECTION: forcing a failure. [ 2116.156774] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.158118] ? fput+0x2b/0x190 [ 2116.158140] ksys_ioctl+0x9b/0xc0 [ 2116.158156] __x64_sys_ioctl+0x6f/0xb0 [ 2116.158175] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2116.184403] do_syscall_64+0xf9/0x620 [ 2116.188197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2116.193384] RIP: 0033:0x45deb9 03:31:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550d, &(0x7f0000000080)) [ 2116.196574] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2116.215462] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2116.223164] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2116.230433] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2116.237702] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2116.244970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2116.252239] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c [ 2116.267205] CPU: 1 PID: 26901 Comm: syz-executor.3 Not tainted 4.19.160-syzkaller #0 [ 2116.275101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2116.284452] Call Trace: [ 2116.287038] dump_stack+0x1fc/0x2fe [ 2116.290673] should_fail.cold+0xa/0x14 [ 2116.294574] ? setup_fault_attr+0x200/0x200 [ 2116.298907] ? lock_acquire+0x170/0x3c0 [ 2116.302896] __should_failslab+0x115/0x180 [ 2116.307136] should_failslab+0x5/0xf [ 2116.310852] __kmalloc+0x2ab/0x3c0 [ 2116.314391] ? usb_hcd_submit_urb+0x656/0x23c0 [ 2116.318982] usb_hcd_submit_urb+0x656/0x23c0 [ 2116.323400] ? kasan_kmalloc+0x139/0x160 [ 2116.327467] ? unlink1+0x500/0x500 [ 2116.331012] ? hub_ext_port_status+0x112/0x4b0 [ 2116.335598] ? hub_activate+0x515/0x19b0 [ 2116.339661] ? hub_resume+0xa5/0x3b0 [ 2116.343383] ? usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2116.349270] ? usb_resume_both+0x26b/0x840 [ 2116.353515] ? __rpm_callback+0x1ee/0x830 [ 2116.357660] ? rpm_callback+0x18f/0x230 [ 2116.361633] ? rpm_resume+0x121c/0x1bd0 [ 2116.365607] ? __pm_runtime_resume+0xb7/0x170 [ 2116.370109] ? usb_autoresume_device+0x1e/0x60 [ 2116.374691] ? usbdev_open+0x1ab/0x7f0 [ 2116.378580] ? chrdev_open+0x266/0x770 [ 2116.382472] ? do_dentry_open+0x4aa/0x1160 [ 2116.386711] ? path_openat+0x793/0x2df0 [ 2116.390692] ? do_filp_open+0x18c/0x3f0 [ 2116.394668] ? do_sys_open+0x3b3/0x520 [ 2116.398557] ? do_syscall_64+0xf9/0x620 [ 2116.402536] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2116.407900] ? do_syscall_64+0xf9/0x620 [ 2116.411881] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:31:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40085511, &(0x7f0000000080)) 03:31:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4020940d, &(0x7f0000000080)) 03:31:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000080)) [ 2116.417249] ? do_filp_open+0x18c/0x3f0 [ 2116.421228] ? do_sys_open+0x3b3/0x520 [ 2116.425122] usb_submit_urb+0xb2f/0x13b0 [ 2116.432063] usb_start_wait_urb+0x108/0x4c0 [ 2116.436397] ? setup_fault_attr+0x200/0x200 [ 2116.440727] ? usb_api_blocking_completion+0xa0/0xa0 [ 2116.445845] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2116.450868] ? memset+0x20/0x40 [ 2116.454162] usb_control_msg+0x31c/0x4a0 [ 2116.458234] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2116.462752] ? wait_for_completion_io+0x10/0x10 [ 2116.467429] hub_ext_port_status+0x112/0x4b0 [ 2116.471857] hub_activate+0x515/0x19b0 [ 2116.475746] ? hub_port_logical_disconnect+0x170/0x170 [ 2116.481028] ? ktio+0xae0/0x2090 [ 2116.484405] ? lock_downgrade+0x720/0x720 [ 2116.488549] ? trace_hardirqs_off+0x64/0x200 [ 2116.492940] hub_resume+0xa5/0x3b0 [ 2116.496463] ? hub_reset_resume+0x80/0x80 [ 2116.500594] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 2116.505476] usb_resume_interface.part.0.isra.0+0x271/0x390 [ 2116.511189] usb_resume_both+0x26b/0x840 [ 2116.515235] ? usb_resume_interface.part.0.isra.0+0x390/0x390 [ 2116.521104] ? _raw_spin_unlock_irq+0x24/0x80 [ 2116.525580] __rpm_callback+0x1ee/0x830 [ 2116.529577] ? usb_runtime_suspend+0x140/0x140 [ 2116.534142] ? __pm_runtime_resume+0x170/0x170 [ 2116.538705] ? lock_acquire+0x170/0x3c0 [ 2116.542666] ? rpm_resume+0x892/0x1bd0 [ 2116.546536] ? usb_runtime_suspend+0x140/0x140 [ 2116.551095] rpm_callback+0x18f/0x230 [ 2116.554876] ? usb_runtime_suspend+0x140/0x140 [ 2116.559473] rpm_resume+0x121c/0x1bd0 [ 2116.563260] ? pm_runtime_autosuspend_expiration+0x1c0/0x1c0 [ 2116.569051] ? lock_acquire+0x170/0x3c0 [ 2116.573013] ? __pm_runtime_resume+0xa9/0x170 [ 2116.577490] ? do_raw_spin_lock+0xcb/0x220 [ 2116.581707] __pm_runtime_resume+0xb7/0x170 [ 2116.586010] usb_autoresume_device+0x1e/0x60 [ 2116.590418] usbdev_open+0x1ab/0x7f0 [ 2116.594136] ? releaseintf+0x150/0x150 [ 2116.598000] chrdev_open+0x266/0x770 [ 2116.601696] ? lockref_get+0x11/0x50 [ 2116.605401] ? __register_chrdev+0x400/0x400 [ 2116.609808] ? check_preemption_disabled+0x41/0x280 [ 2116.614822] do_dentry_open+0x4aa/0x1160 [ 2116.618871] ? __register_chrdev+0x400/0x400 [ 2116.623287] ? inode_permission.part.0+0x10c/0x450 [ 2116.628197] ? chown_common+0x550/0x550 [ 2116.632151] ? inode_permission+0x3d/0x140 [ 2116.636367] path_openat+0x793/0x2df0 [ 2116.640168] ? path_lookupat+0x8d0/0x8d0 [ 2116.644210] ? mark_held_locks+0xf0/0xf0 [ 2116.648281] do_filp_open+0x18c/0x3f0 [ 2116.652070] ? may_open_dev+0xf0/0xf0 [ 2116.655866] ? lock_downgrade+0x720/0x720 [ 2116.659992] ? lock_acquire+0x170/0x3c0 [ 2116.663946] ? __alloc_fd+0x34/0x570 [ 2116.667642] ? do_raw_spin_unlock+0x171/0x230 [ 2116.672121] ? _raw_spin_unlock+0x29/0x40 [ 2116.676254] ? __alloc_fd+0x28d/0x570 [ 2116.680039] do_sys_open+0x3b3/0x520 [ 2116.683734] ? filp_open+0x70/0x70 [ 2116.687257] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2116.692600] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2116.697618] ? do_syscall_64+0x21/0x620 [ 2116.701575] do_syscall_64+0xf9/0x620 [ 2116.705371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2116.710545] RIP: 0033:0x4179b1 [ 2116.713717] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2116.732596] RSP: 002b:00007f813d7de820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2116.740294] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 2116.747559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f813d7de850 [ 2116.754808] RBP: 00007f813d7deca0 R08: 000000000000000f R09: 0000000000000000 [ 2116.762073] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000a [ 2116.769323] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2116.792388] hub 9-0:1.0: hub_ext_port_status failed (err = -12) 03:31:28 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045503, &(0x7f0000000080)) 03:31:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550c, &(0x7f0000000080)) 03:31:28 executing program 2: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/68) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xd4, 0xc8a00) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001280)={0x0, 0x16, 0x50b3, 0x1, 0xc3, 0x401, &(0x7f0000001180)="54ce98f4938d6ac3b191f67557fd1cac9d7f61fc93da4ef0b9fbe50d464e2984aa597b5d170cc34249e8b371f51689fc65ed5523511e8b1ae50f5bbd675899a767ea786b3ebcf84a32af94332efa93db86c6949be2cde1d5845477cb7ba8972ebbc7f9848d6d66737546421bfb06652b7ef8a810b59af623685197ac25c525173ec76ad21e7d889b462007338618961bc7bc1aa94d4cbb9a14c925fdd12c07a1549065c39b0f93a226ebce01a283ea2f041b60ebacb58204dd74cf75e0690eb5eec15a"}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000001140)=0x5) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x9}}, 0x1000, 0x40000000, &(0x7f00000000c0)="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"}) 03:31:28 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1000000) 03:31:28 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:29 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb02, 0x0) 03:31:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045505, &(0x7f0000000080)) [ 2116.957373] FAULT_INJECTION: forcing a failure. [ 2116.957373] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.012268] CPU: 0 PID: 26936 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2117.020175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.029532] Call Trace: [ 2117.032131] dump_stack+0x1fc/0x2fe [ 2117.035772] should_fail.cold+0xa/0x14 [ 2117.039674] ? setup_fault_attr+0x200/0x200 [ 2117.044001] ? lock_acquire+0x170/0x3c0 [ 2117.047991] __should_failslab+0x115/0x180 [ 2117.052239] should_failslab+0x5/0xf [ 2117.055960] __kmalloc+0x2ab/0x3c0 [ 2117.059509] ? usb_hcd_submit_urb+0x656/0x23c0 [ 2117.064104] usb_hcd_submit_urb+0x656/0x23c0 [ 2117.068520] ? kasan_kmalloc+0x139/0x160 [ 2117.072588] ? unlink1+0x500/0x500 [ 2117.076128] ? proc_control+0x322/0x7f0 [ 2117.080105] ? usbdev_do_ioctl+0x13ad/0x3030 [ 2117.084516] ? usbdev_ioctl+0x21/0x30 [ 2117.088320] ? do_vfs_ioctl+0xcdb/0x12e0 [ 2117.092382] ? ksys_ioctl+0x9b/0xc0 [ 2117.096011] ? __x64_sys_ioctl+0x6f/0xb0 [ 2117.100074] ? do_syscall_64+0xf9/0x620 [ 2117.104055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.109426] ? do_syscall_64+0xf9/0x620 [ 2117.113403] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.118784] usb_submit_urb+0xb2f/0x13b0 [ 2117.122859] usb_start_wait_urb+0x108/0x4c0 [ 2117.127186] ? setup_fault_attr+0x200/0x200 [ 2117.131521] ? usb_api_blocking_completion+0xa0/0xa0 [ 2117.136639] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2117.141679] ? memset+0x20/0x40 [ 2117.144969] usb_control_msg+0x31c/0x4a0 [ 2117.149039] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2117.153543] ? wait_for_completion_io+0x10/0x10 [ 2117.158220] proc_control+0x322/0x7f0 03:31:29 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x6ab02) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:31:29 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2000000) 03:31:29 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3000000) [ 2117.162028] ? proc_do_submiturb+0x3af0/0x3af0 [ 2117.166619] ? _kstrtoull+0x186/0x420 [ 2117.170426] ? _parse_integer+0x180/0x180 [ 2117.174585] usbdev_do_ioctl+0x13ad/0x3030 [ 2117.178829] ? proc_bulk+0x860/0x860 [ 2117.182551] ? __lock_acquire+0x6de/0x3ff0 [ 2117.186801] ? get_pid_task+0xf4/0x190 [ 2117.190693] ? mark_held_locks+0xf0/0xf0 [ 2117.194760] ? proc_fail_nth_write+0x95/0x1d0 [ 2117.199263] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2117.204204] ? usbdev_compat_ioctl+0x30/0x30 [ 2117.208614] usbdev_ioctl+0x21/0x30 03:31:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0xba65, 0x8, [{0x3}, {0xa, 0x1}, {0x7}, {0xb, 0x1}, {}, {0x6}, {0xe}, {0x3, 0x1}]}) [ 2117.212248] do_vfs_ioctl+0xcdb/0x12e0 [ 2117.216142] ? lock_downgrade+0x720/0x720 [ 2117.220295] ? check_preemption_disabled+0x41/0x280 [ 2117.225316] ? ioctl_preallocate+0x200/0x200 [ 2117.229731] ? __fget+0x356/0x510 [ 2117.233192] ? do_dup2+0x450/0x450 [ 2117.236731] ? vfs_write+0x393/0x540 [ 2117.240454] ? fput+0x2b/0x190 [ 2117.243686] ksys_ioctl+0x9b/0xc0 [ 2117.247149] __x64_sys_ioctl+0x6f/0xb0 [ 2117.251047] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2117.255634] do_syscall_64+0xf9/0x620 [ 2117.259448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.264639] RIP: 0033:0x45deb9 [ 2117.267833] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2117.286738] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.294453] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2117.301723] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2117.308993] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2117.316264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2117.323537] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c 03:31:29 executing program 4 (fault-call:1 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000100)={0x1, 0x4, 0x401, 0x5, 0x8, 0x6}) write$input_event(r0, &(0x7f00000000c0)={{r1, r2/1000+10000}, 0x16, 0x0, 0x2f23}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x800, 0x0) 03:31:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550d, &(0x7f0000000080)) 03:31:29 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4000000) 03:31:29 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb04, 0x0) 03:31:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004550f, &(0x7f0000000080)) 03:31:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:29 executing program 2: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x440600) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x2, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:29 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 03:31:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40085511, &(0x7f0000000080)) 03:31:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045510, &(0x7f0000000080)) 03:31:29 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb05, 0x0) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x7000000) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5421, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x319, "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"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) read$usbfs(r1, &(0x7f0000000200)=""/188, 0xbc) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045515, &(0x7f0000000080)) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4020940d, &(0x7f0000000080)) 03:31:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb06, 0x0) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xbd00400) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5450, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 2: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x8000, "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"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200080, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045518, &(0x7f0000000080)) 03:31:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb07, 0x0) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000080)) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3f000000) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5451, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045519, &(0x7f0000000080)) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045503, &(0x7f0000000080)) 03:31:30 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb02, 0x13f202) 03:31:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb08, 0x0) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5452, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf3ffffff) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045505, &(0x7f0000000080)) 03:31:30 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@generic={0x5, 0x6, 0x7, 0x6, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x14, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xe, 0x3ff, 0x1}, 0x10}, 0x78) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000280)={0x4922, 0xa, [{0x9}, {0x2, 0x1}, {0xd, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0xe, 0x1}, {0xb}, {0xe, 0x1}, {0x7, 0x1}, {0x1, 0x1}]}) write$vhost_msg(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r0, 0x1, r1, 0x4}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80085504, &(0x7f0000000080)) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf6ffffff) 03:31:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5460, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xffffff7f) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004550f, &(0x7f0000000080)) 03:31:30 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x550b, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xfffffff3) 03:31:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3) 03:31:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x7fff, 0x7f, 0x4000}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045510, &(0x7f0000000080)) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xfffffff6) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551c, &(0x7f0000000080)) 03:31:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5514, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:30 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x282180) 03:31:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045515, &(0x7f0000000080)) 03:31:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1000000000000) 03:31:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)) 03:31:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x551f, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:31 executing program 2: ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xd) r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, 0x0) getpgrp(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000180)=0x4) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3174951dda010f9d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 03:31:31 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x7) 03:31:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045518, &(0x7f0000000080)) 03:31:31 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4d00b00000000) 03:31:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8010550e, &(0x7f0000000080)) 03:31:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045519, &(0x7f0000000080)) 03:31:31 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x8) 03:31:31 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x100000000000000) 03:31:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) 03:31:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000080)) 03:31:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:31 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x300) 03:31:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8038550a, &(0x7f0000000080)) 03:31:31 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x200000000000000) 03:31:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200003, 0x10c80) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xfea) 03:31:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80085504, &(0x7f0000000080)) 03:31:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:31 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x700) 03:31:31 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8108551b, &(0x7f0000000080)) 03:31:31 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x300000000000000) 03:31:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551c, &(0x7f0000000080)) 03:31:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x400000000000000) 03:31:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)) 03:31:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4d00b) 03:31:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40b00, 0x400843) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:31:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, &(0x7f0000000080)) 03:31:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004551e, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8010550e, &(0x7f0000000080)) 03:31:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x700000000000000) 03:31:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x200000) 03:31:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, &(0x7f0000000080)) 03:31:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x40049409, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1000000) 03:31:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000080)) 03:31:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3f00000000000000) 03:31:32 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) 03:31:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550c, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2000000) 03:31:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc00c5512, &(0x7f0000000080)) 03:31:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8038550a, &(0x7f0000000080)) 03:31:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf3ffffff00000000) 03:31:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000080)) 03:31:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000200)=""/250) write$vhost_msg(r0, 0x0, 0x0) read$usbfs(r0, &(0x7f00000000c0)=""/235, 0xeb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r3, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000001c0)=0x4) 03:31:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x3000000) 03:31:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8108551b, &(0x7f0000000080)) 03:31:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf6ffffff00000000) 03:31:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4000000) 03:31:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105502, &(0x7f0000000080)) 03:31:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, &(0x7f0000000080)) 03:31:33 executing program 2: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xffffff7f00000000) 03:31:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105512, &(0x7f0000000080)) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x7000000) 03:31:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0xa33e, 0x16, [{0xe, 0x1}, {0x3}, {0x1, 0x1}, {0xa, 0x1}, {0x1}, {0xa}, {0x6}, {0x6}, {0x7}, {0x2, 0x1}, {0xb, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x8}, {0xc, 0x1}, {0x1}, {0x1, 0x1}, {0xa}, {0xa, 0x1}, {0x0, 0x1}, {0x7, 0x1}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0xfffffff7) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) 03:31:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x40085511, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100b05, 0x400000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000080)=""/198, 0xc6, &(0x7f0000000180)=""/142, 0x1, 0x3}}, 0x48) 03:31:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, &(0x7f0000000080)) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x8000000) 03:31:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4020940d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0xc05c) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 03:31:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)) 03:31:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) socket(0x2, 0x5, 0xb8) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc00c5512, &(0x7f0000000080)) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xbd00400) 03:31:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0189436, &(0x7f0000000080)) 03:31:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x41045508, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x402) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x3, 0x0, 0xc000000, 0xd28c, 0x1}) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf3ffffff) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000080)) 03:31:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x200, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x1, 0x13, 0x200, 0x8, 0xe6, 0x6, &(0x7f00000000c0)="4ea495b84cc9981d56a9d6a2aeee7e1ed54d5df0b3cddb97dd1a794e38972932635f4d42731e7c4e38fa326be592f0c7c6cecf8ee8a3164ef23e0078641af5fa4b537455c441e2ae321eae6a6a2a98b2645488115b9f4118266dba626282b94d4c7bb4735ff381ec7428918119b35e3d21ca31fbd35344737bed0e9f172def33e6b8436faed5cecbde1bc9bb44054879666cfc43a011c1423614cb5f114ea3ad5abfb1c1a662020b17d30edfa871474b2a3969bf28b29081e23bd70edee28df1bff4395b41ae60491923addd1de84113925382ff6fe1df8e4716751754be83260bf58bcdb46a"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) getresgid(&(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000280)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x484800, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000200)={0x2}) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf6ffffff) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105502, &(0x7f0000000080)) 03:31:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045503, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc020660b, &(0x7f0000000080)) 03:31:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x800, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:31:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa0c00, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/185, &(0x7f00000001c0)=0xb9) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105512, &(0x7f0000000080)) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xfffffff3) 03:31:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:33 executing program 0: ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/234) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40080) 03:31:33 executing program 2: pkey_alloc(0x0, 0x2) getsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x2000) ioctl$CHAR_RAW_PG(r0, 0x1269, &(0x7f0000000040)={0x5a0e, 0x20, 0xa9, &(0x7f00000000c0)="f2fec3741806529b0cd66df9267b65da18e87b90fd4a78ee0abec9b52bbf12da60964011db046de650ac13a235c424527ab8a566a93445e1bab4f5701f11fea0643d28053d5f3dbe242794934f500eed004ebef8c548a986928a6e8baaa1644383ca242c3cbb4c3df7ffb3aeff271fc921c1fc0b609bb5e00f5edbc070d0792b207cb0847ea968e8e0a6bab05ae546d2b360ac4ec67cec8d022e28dc6e3df84ea0ae7ba7bc4e86162e"}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000180)=""/84) 03:31:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)) 03:31:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xfffffff6) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='f2fs_direct_IO_enter\x00'}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000000)={0xff, &(0x7f00000000c0)="80e02bc03e4ebb77917f87fd4b0dc1b3f42cbc28ed8a7d1c33b7e40a50a1fb37237d76769bce3ea6bf07a16db26112ccc6ef7ab651d40fc9c8eb48954291b10dc63a3af5c586fce6f630a07e60a265ee70a45b847f90216b209980833473e702ff94300e9c443f461d0d8a553c7281594274c6fc746129b1ef105efc9e7adc72f8335bd489c26259416840b14733cf31455d27f7aaa41ee5c7cdecb8"}) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0xfdfdffff}) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1000000000000) 03:31:34 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x10, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x44) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0xfffffdfd}) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 0: shmget(0x3, 0x400000, 0x20, &(0x7f0000bfe000/0x400000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x4) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0189436, &(0x7f0000000080)) 03:31:34 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x11a080) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x4d00b00000000) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc020660b, &(0x7f0000000080)) 03:31:34 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 03:31:34 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffe, 0x501800) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045518, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x100000000000000) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0x0, 0xfdfdffff}) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x200000000000000) 03:31:34 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x0, r2, 0x3}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x840) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000340)={0x12, 0xcc, &(0x7f0000000240)="40ce821373214ef25e9db178774417692c52e8266f47f4ded2efed9f7ee8f3e266576f286f35ad3626acd59f252cadb7581999c52e0d8eec9750b59e0c7b1e2e4e37a49d332893cf94fda5ba364d3d41fa8b27502093ff4bd5d6a5632c4292779dc40e1c2e9d9dd556245f52ee7be006e47cd4db626043de37d6d23679ebac65d614f5c47ea222cb46e6d0e43981b8c8dbb8510e5729e6961300ae9c13faf6af0fe5ff52723f06b86c0e66b1cafbf0b770268b34a5de3af4602f43b2c09c8ca515da9cc4ae18a6a9fff7c149"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000180)=[{{r5, r6/1000+10000}, 0x5, 0x3, 0x3}, {{0x77359400}, 0x1f, 0xfffd, 0x7}, {{0x77359400}, 0x11, 0x5c, 0xa8e}, {{}, 0x17, 0x0, 0x4}, {{}, 0x1f, 0x1000, 0x80}, {{0x77359400}, 0x1, 0x8, 0x7}, {{}, 0x1b, 0x5f, 0x3}, {{0x0, 0x2710}, 0x1f, 0x2, 0x3528}], 0xc0) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0x0, 0xfffffdfd}) 03:31:34 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x94a, 0x5830c0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x80) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0x10000) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0xfdfdffff}) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8004551a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x300000000000000) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000002f764673a9f6b224bc28fe202c2b745bb96683160abf4798b1740dd36729240079a93f3bca39644b8fcf073dfe62fbee22b6c96d4deae9496efa28c4b432bae56dcb82ce893f64aeebe3c82d975280"]) 03:31:34 executing program 2: socket(0x22, 0x0, 0xbd8) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xe911ad, 0x0) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0xfffffdfd}) 03:31:34 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x5) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80085504, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x100000000aac2, 0x400141) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5514, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x80, 0x2}) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x400000000000000) 03:31:34 executing program 2: ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:34 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x96880) 03:31:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="000049f58ba6f19c25652fe8f901eb1a49b86c"]) 03:31:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x700000000000000) 03:31:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0x0, 0xfdfdffff}) 03:31:34 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x2) 03:31:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x800000000000000) 03:31:35 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0xfffffffe}) r1 = accept4$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote, @default}, &(0x7f0000000100)=0x1c, 0x800) connect$rose(r1, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @default}, 0x1c) 03:31:35 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="5edf00001d0000000e878dd212858c0e070e890a8b8f890f800d0f810383898a040f060089"]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000040)={0xe}) 03:31:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0x0, 0xfffffdfd}) 03:31:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb07, 0x200) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x222) 03:31:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf3ffffff00000000) 03:31:35 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) 03:31:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000ab16566e4a3b81038db244987d28eebfbb981c7f4c47d84802fafa49fb5fe43f3dbb469f9f53daf234c1e63ca4decfad90"]) 03:31:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008551d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:35 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendto$rose(r0, &(0x7f00000000c0)="670b6616bb21dfc872a2b75999a2ab6e53137a13bbf2fe5be5e029684b7018634ddd6a60353116a99b6a9b5f68f571dee1902db4ca81122f3b2f30c9cabedc36d393048a5fc87137605a3ee966010ae378f50bde35e5a3f4646ca919cf8370bbadbde3dab6d8a738935bc961c9e59b8cb8b46beb717c89802dd2d59fabda1089b457dc", 0x83, 0x4000, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xa, 0x9, 0x8001}) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7) 03:31:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x1) 03:31:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xf6ffffff00000000) 03:31:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x7, 0xf1e}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000100)=ANY=[@ANYBLOB="00006681120000000789000506008e0d8a8108898d0500000087"]) getsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000140)=""/177, &(0x7f0000000080)=0xb1) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) getuid() 03:31:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x42402, 0x0) 03:31:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8010550e, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:35 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x13, 0x7, 0x1, 0x8b, 0x0, &(0x7f00000000c0)="6937730276bc00f71145db9e5df8691bb36dc4b87199f60399bc6ec24ecb21d247ae97a58c3009e31b6a5e6733923fe9591e10f16309422fd6fec7196a718d6821c275fbf8c0db54cfe1f186341013f86a443fc431706a30bd4c18a221c38bcd8f1b710e7bceca30e236d3bb5e496c5e2065c85fae00fd82f855d4f19c74bd5164cc23b3a2cbcd0df472d8"}) 03:31:35 executing program 0: syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x9) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x6) 03:31:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xffffffff00000000) 03:31:35 executing program 2: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0xe}}, 0x9b, 0x81, &(0x7f00000000c0)="925202b80d0699bdab485d88f62c54c9c51c411044e7b7769858f4a1886415ae319ba1ccdd209258b0f343d8da3bff3f711b61af793898f7b999ad08d90aa9dcff1ecd76ea152b54bf0c788cd8ad19e67017d3a34209e5b67768bdf7337b2b486754f7a519548437fefd6f556e20d572892e444e519bb235626f7f54183dde901db4edf30014a04408afe8a0bfe5f7b6067d7b2b9d37f00b9f192e"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000000b03, 0x200601) 03:31:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) 03:31:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:35 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000000)={0x8000, &(0x7f00000000c0)="0d83754647c2478fc1f967a3ac39a374dd7dce453a2bf5eb3b48ce48d8860e1373ae010b6c28a99252fa2e3a18ebcebf7b393a4799caecba6ada43dfad7b394a1afaa10e20c0546a4ceac58b1d27ba9cd6ba123b5e30c5aeb44fbcd3a1dd0a5ca90f5f4d6be24e07b4e198ddc09449f50419010e721df4cbf0d0b407e12602c5d989913043f03bda0fb14ec79e04235b0d95c0b3a73eb45df74510093d6e2023ffc049e44003b80352d939a1"}) 03:31:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x400000) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0xc01080) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x4, &(0x7f00000000c0)="a63ff6f36f74c3430f7a5677ffaa0133552e7eea92c86e5ca5fd2ee2e3fa9b8af4e26d3196da882cc2085a590f2ccced659ae78cad01c46af0c1cd40b863c35d2fda18b56ed67425d66dcdc2c86dce4141ae8199de7d2dd8ecb7a598bcb4c986f15230195586c46558b1f0351305ec2aa87889c6e7cdaaa190d63397fd50475a2c932eac42279cc0a324bfabe18bab2f2d4a57c9a372a5d76f373922ff72ce9aab2b491e84660f050592ac3400f40c449674e1ba71001e95e74aad103657566ca8861c8943b61792361e"}) 03:31:35 executing program 5: ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008550e, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0xc, 0x1}}, 0x25, 0x8, &(0x7f0000000000)="1d4022098dd77ecf1da35acd82d0e4dbd739b267771e73f22febc657ee62fca11eff3abfec"}) 03:31:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="814d314ca5f1c608bbe76a3657f381e55e43b0b1afa1c098b66a029512bcde6c44bfbd1fc31b892ca60a1816166bc39da54f105e93"]) 03:31:36 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80800, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x24800, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000000)=0x2) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 3: write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x2, 0x3, 0x1, "2beabcfc0e16ac2b26a6e0e5b06abfcd2f71d6dee1ae9eb9fb5b6312c96b8c4198286728643efdbe248897a291ee6168fd58aa26906858fd6e2bc278f4527274a25daeaa06a188c9c5db2f552acce9de092eaad31ad94eb99c1292c809179defd6e9938e4ec430f2345bbcee9695addc700509e012fe824efd2814f6727bc745f27b6d5ec47289eb02aaa50b18b4140be450e601f515a5266d064b6f9e24a6d56026c090e3d946f533d1343a8ae37bb1bdccd7ce0fba92e7a411385d7291d56ba174d909455bdad7a5416a17e632d8"}, 0xdf) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:36 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb02, 0x4700c0) 03:31:36 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:36 executing program 5: shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xaac1, 0x98042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f00000000c0)=ANY=[@ANYBLOB="01376100000000abbb7c3d181d282ff143f2b2aa24e33bf08b7eefbf66cedc5eb637954517d0b3649a081c5ad254c99f44"]) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x40) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/168) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1a) 03:31:36 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x2000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x7d9082, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000000c0)=0x3) socket$bt_bnep(0x1f, 0x3, 0x4) 03:31:36 executing program 3: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x2) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe0a8, 0xa0dc3) 03:31:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x264800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0xa, 0x1}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000100)=ANY=[@ANYBLOB="a4adc56731eaaad25b7b759c81e81a7c772e34e4e0cdb7f880ceead0223a959cfced37980ad613a8f5352e82"]) 03:31:36 executing program 5: pkey_free(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x4) 03:31:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3d, 0x0) 03:31:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 03:31:36 executing program 2: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1fe) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000040)=0x8000, 0x4) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x8}) 03:31:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00']) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4a6, 0x4000) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x9}}, 0x8b, 0x7, &(0x7f00000001c0)="e12c11ac278a4e3f2c914e9e65318ab8b31934ea2f7e7d83ba3715165edce3eda40114c5b4d15d8168237551dd92e0dbadf505e81b6cfd37cae5f29bacf071ff4ec5e821323568bfca295c77a346b50bed27e26fa893a3ecd3db8b3a32b2e6eb0615f088f56ee34b61685910b232c0b4681902d6077325b1743e9949833e56ee14cc5bb0d5275024e44641"}) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 0: ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:36 executing program 3: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/18) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x882) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)=0x8001) 03:31:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/172) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000d00662a6faf080000088591fc67e234dcb8522db5fc"]) 03:31:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)={0x3, 0x6, [{0x7, 0x1}, {0x4, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}]}) 03:31:36 executing program 2: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0x5}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {0x2, 0x80, 0x0, 0x101}, 0x37, [0x80, 0x1f, 0x5, 0x800080, 0x4, 0x1, 0x8, 0x81, 0x7, 0x2, 0xff, 0x205, 0xf8, 0x10000, 0x5, 0x159631f6, 0x400, 0x80000001, 0x8, 0x2, 0x0, 0x8, 0x1, 0x7, 0x3f, 0x8, 0x1, 0x96, 0xfb, 0x8, 0x8, 0x8, 0x0, 0x4, 0xfff, 0xb4df, 0x3, 0x6, 0x1f, 0x51000, 0xffffffff, 0x8, 0x7f, 0x7, 0x1, 0x8, 0x80000000, 0x2, 0x8, 0x7902cca2, 0x800, 0x1, 0x8000, 0x2, 0x81, 0x10000, 0x0, 0x80, 0x8, 0xffff78bd, 0x0, 0x401, 0x6, 0x4], [0x5, 0xfffffe00, 0x7, 0x10000, 0xff, 0x6, 0x1f, 0x9883, 0x1f, 0x1, 0x1, 0x80000000, 0x0, 0x7fff, 0x9, 0xaf9a, 0xff, 0x91, 0x5, 0xffff, 0x7, 0xffffffff, 0xffff, 0x3, 0x3, 0x6, 0x90, 0x1, 0x2, 0x4, 0xc70, 0x0, 0x91, 0x2, 0x7, 0x7a, 0xb3200000, 0x0, 0x7, 0xa, 0x1, 0x0, 0x7, 0xd10, 0x3f, 0x7ff, 0x80, 0x2, 0x3, 0x0, 0x0, 0x7, 0xd7, 0x400, 0x100, 0x1, 0x2, 0x4, 0x8001, 0x9, 0x6, 0xa6fa, 0x8, 0x20], [0x1, 0x5, 0x0, 0x800, 0x2, 0x1, 0x1, 0x5, 0x8, 0x2, 0x1, 0x1, 0x1, 0x7, 0x3, 0x6, 0x80, 0x2, 0x4bf, 0xcb, 0xfffffff8, 0x7, 0x0, 0x100, 0xfff, 0x8c25, 0x6, 0x8, 0xffff, 0x1000, 0x90c1, 0x1, 0x3f, 0x3, 0x9, 0x0, 0x2, 0x2, 0x5c3, 0xfffffe01, 0xfffffffb, 0x65, 0x40, 0xafb, 0x40, 0x1, 0x4, 0x2, 0x401, 0x1, 0x3, 0x7, 0x1, 0x5, 0x0, 0x2, 0xffff686c, 0x0, 0x200, 0xfffffffe, 0x60000000, 0xfffff000, 0x4, 0x81], [0x4deddf70, 0xa649, 0x8432, 0xfffffffc, 0x4c5, 0x31, 0xcaa, 0x3, 0x1, 0x200, 0x8000, 0x1, 0xb98, 0x4, 0x7, 0x7fff, 0x8, 0x7, 0xffffb856, 0x2, 0x1f, 0x4, 0x3, 0x800, 0x2, 0x9, 0x0, 0x34ca, 0x2, 0xff, 0x0, 0x3, 0x400, 0x6, 0x9, 0x378b, 0x8233, 0x7, 0x4, 0x7f, 0x8000, 0x1, 0x7fffffff, 0x1, 0x0, 0x7f, 0x9, 0x4, 0x4, 0x2, 0xfffff162, 0x3b, 0x517, 0x7, 0xb63, 0x9, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0x800, 0x20]}, 0x45c) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc00c5512, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x649, 0xc529, 0x199e, 0x2, 0x9, 0x8}) 03:31:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x8, 0x1}}, 0x1000, 0x3f, &(0x7f00000000c0)="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"}) 03:31:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x141041) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x40000008, 0x8, 0x9e, 0x0, 0x1f, 0x3}) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000100)={0x9f, &(0x7f00000000c0)='chQ'}) 03:31:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, {&(0x7f00000000c0)=""/163, 0xa3, &(0x7f0000000180)=""/180, 0x1, 0x3}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000110028c5188b90010ba45a6099624fd6bd1ea3a02d6114086eae617d8d05bff3ab758c8d0d0b08c90b8685818f"]) 03:31:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x7137) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7fffffff, 0x3a7}) 03:31:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x4, {0x1, 0x1ff, 0x0, 0x6, 0x2, 0x3}}) 03:31:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105502, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000000c0)={0x2, 0x2, "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"}) 03:31:36 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0xcd842) 03:31:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000000c0)={0x8, "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"}) 03:31:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8000000000000000, 0x780541) r1 = socket(0x2c, 0x3, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x0, 0x1ff, 0x10001, 0x1, 0x0, 0x7}) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) 03:31:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="0094810000000000"]) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 5: clock_gettime(0x4, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0xea60}, 0x12, 0x6, 0x5}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000240)=ANY=[@ANYBLOB="000400001b0000000b880f0a060d0e0d0b0387ee0c9a81ddfd06000000000000000401f6514369a49644922e0274d792deadbb20675d7e696d7549408b992a9874295263369e6faf0952f53c9f20915266f9ce2b7380a195bfdaf92e6f3c5ead391d9e47abe07b1da5e1a3d3aca2913e841cfb59420817279754ce5448acabe241960bcdf60dec35d90767529c8fe84d86703053d714ca060000003fce6999065b76cf9063fa6e79c282da1b7d598793f58e3f2c07548e41e276d2970c4d1be45ee31531f5600a6cb82d1f3934ea35001b75ca51563ed571554f43fb5a8479d09a4649344f75f95ab44b586da72122d46bfa9adeec0ffb6253c322046a7a740ef08e374b36ecc05fcd683775c567657dd7902ccfa95e557bb37e00"/293]) 03:31:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x5) 03:31:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f00000000c0)=@netrom) 03:31:37 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x545200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x5, 0x3f, 0xffff3348, 0x4, 0xffffffffffffffff, 0xd07b, [], 0x0, r0, 0x3, 0x0, 0x3}, 0x40) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2}) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x2, 0x100, 0x3, 0x4, 0x2, 0xffffffff}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x401, 0x3ab000) accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@full={0xb, @dev, @remote, 0x0, [@rose, @default, @netrom, @netrom, @remote, @netrom]}, &(0x7f00000002c0)=0x40, 0x80000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff200001000008"]) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x5, 0x2, "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"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000100)={0x0, 0xed, 0x5, 0x2, 0x6, 0x1}) 03:31:37 executing program 2: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1115) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:37 executing program 3: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000000c0)={0x1000, 0x2, "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"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x400000) 03:31:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x33) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000002"]) 03:31:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac5, 0x672100) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185503, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:37 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x7, 0x1, "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"}) 03:31:37 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x84c00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000000c0)={0x10001, 0x0, "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"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0189436, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40aac2, 0x589142) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000064a7c0"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x2) 03:31:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x12180) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x40, 0x31, 0x1000, 0x3, 0x99, 0x55a9, &(0x7f00000000c0)="8b11e896eeeee5e67893806b6f5409ce6a9a702fbc5d179108e5f1f6c0afd7ffae0e97a4ea1429f44346ddf0f3e0d3fa519f9b64b2f52c57bdce494adb3e741964874e85657527944f1c1be026dc9a4060a9fd7706c2fb2dc77c400e875058b2c1a0cf2e3567a5d5318c7d1bf4faceb3e7f9b1a11b8c9ac329f63e05c1b6bab0056c93dec2df585835bb2bf57d4496f7f982cb835ecda5739b"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 03:31:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xe, 0x1}}, 0x5a, 0xe5f1, &(0x7f0000000000)="5a746b21708d4436c90cff537e8808dc7c6059e9924979c95ef48276d219503b6ff6aa55135c88c9da9da21b0869df0d0c232b1415cc4904349c5334594320bb95437cbddc5c94c8c512a907719045f4348cc8fe034a1d3f2fb4"}) 03:31:37 executing program 3: r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x800) ioctl$CHAR_RAW_BSZSET(r0, 0x40081271, &(0x7f0000000040)=0x6e) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc020660b, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaabf, 0x20903) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xc) 03:31:37 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000001140)={0x2, 0x0, {&(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/96, 0x1, 0x3}}, 0x48) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x7, 0x2, 0x2, 0xfffffc00, 0x10001, 0x2}) 03:31:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x8) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') 03:31:37 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x9) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x24901, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @default, @rose={'rose', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000001c0)={0xc, 0x400, 0x9, 0x800}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400f400", @ANYRES16=r1, @ANYBLOB="080027bd7000ffdbdf25060000000a000900aaaaaaaaaabb0000"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000081) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f00000001c0)=0xffff) write$vhost_msg(r2, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x0, 0x2000000}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000064278fac6589727950a1af04812befbb6803194cb86b50555d226677d868414de2cd2fcc3a68586a2b436", @ANYRES16=r1, @ANYRESHEX=r2]) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101200, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000100)=0x5) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x3, 0xfffffffc}) 03:31:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0xb) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x40000) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="000003000000005e"]) 03:31:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0xc480, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000001c0)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0xc, 0x1}}, 0x8f, 0xffffff01, &(0x7f0000000100)="ffd55add64007f756cd4a87e4382ac02aa865cba2cea9c00092ef6138769c6600ed05c4501665f1cdc6698e642483d55364c0e88792bb5d4f4d1e3fa9d704648a6157a689291bc904af4028056d9de538f6927fe123344d423fae8a693938324c21ac0dd0e97b354dae9f5086634b27d67bc41ed6312eebc5c6d6c348758163e9c72269db6c75e7ba85703865076a3"}) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="f7fa000014007b40b5693685779207050d818909020e83080487020eaf88954644cb1e7c4d47d6d9642cf9b13c354db89d7bcc0e5649a62c9514895f6be074cc2d7c2813e1aba9c04a53f40fe5cef6ace96cf7aed647b4aa57dd9b81e8cfd12b7fce481c1c"]) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x6502) 03:31:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$CHAR_RAW_GETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) 03:31:37 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xff, 0x200200) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000180)={0xfffffffe, "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"}) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x400000000007, 0x80201) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105000, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000000c0)) 03:31:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x50240, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x3, 0x1}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8004551a, &(0x7f0000000080)) 03:31:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:37 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2) 03:31:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000009, 0x42) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:37 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x505143, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) getuid() 03:31:38 executing program 2: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000200)={0x9, 0x2, "ed31429cd6d1c2ee5a1c3063ddf245eaf1443ae25e9bffe8faeb1f88b5a7661faa09d6762662064e229e0fce6326242f4af776e8a9ff17ec2e0ed3fe960b82a89d194c65363d5031d6354aa4cbb13db81fd03ff7175aa4ead23b233bc54a916585e8fa85503f34ed938e576a0eef8724e050699da3c6e9b8293da2ec9536e5ac332e86985ac04aa23f9d5522672d817fc61d9588b941b557c59470e2e9e228d05a7bb0e191d695be1cd31bbc3426820961d93cfd1eafde86e6fe516b1b30e649af5b98ab8634f150f3405ac3b3b22151928afed1f745fc203ec58b0fb6455678ffd28d00"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:38 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = semget(0x0, 0x4, 0x20c) semctl$IPC_RMID(r0, 0x0, 0x0) 03:31:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000000c0)=""/244) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:38 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1470c0) 03:31:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000000c0)=0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000)) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000100)) 03:31:38 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb04, 0xe502) r0 = socket(0xf, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000d200"]) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000380)={0x3, "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"}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x203, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x64}}, 0x80) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) 03:31:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/6) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400080) 03:31:38 executing program 0: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x101, @default, @netrom={'nr', 0x0}, 0x1, [@null, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0xf2, 0x1, 0x0, 0x2}, 'syz1\x00', 0x1}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xa4, 0x10000) 03:31:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) recvfrom$rose(0xffffffffffffffff, &(0x7f00000000c0)=""/128, 0x80, 0x40, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:31:38 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0xffffffffffffffff) accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev, @null}, &(0x7f0000000140)=0x1c, 0x100000) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc800, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/66) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0xb}) 03:31:38 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x82) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000000c0)=""/4096) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0000eca3f0230000"]) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x100000001) 03:31:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$SIOCRSACCEPT(r0, 0x89e3) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800000000afa, 0x44840) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x78) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000200)={0x0, 0x7, [{0x6, 0x1}, {0x6}, {0xd, 0x1}, {0x2}, {0xa, 0x1}, {0x9, 0x1}, {0xa}]}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={[], 0x11}}, 0x8) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x8) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x90000000000000, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000000000000000, 0x8000) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000001240)={{{0x9, 0x1}}, 0x1000, 0x8, &(0x7f0000000240)="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"}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000140)=""/137) 03:31:38 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x4400) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xa3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) 03:31:38 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x3) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000140)='syz0\x00') sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x1, 0x70bd2c, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044080) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240)='/dev/hwrng\x00', 0x800, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000afa822e2eaf7cf98b1919650a05add30cb9ff07f586dac6938e0e175329009410d5b7280f2fb1641e8a71cbecd69fe1db6d5a64516410b1e1215d77528cb1de4aa5875b908a20998c908b7245a8c83a718e91de67859b55f55269693fee347a33ad66e454ed9834adc42b46f4f78989a6683bf3c660354af2467ddd44d9aca"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x100, 0x0, 0x3, 0x84, 0x1, 0x7, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1e}, [@generic={0x3f, 0x8, 0x9, 0x1, 0xffffffff}, @map={0x18, 0xd, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0xb, 0xa, 0x3, 0xa0, 0xfffffffffffffff0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x0, 0x400, 0x7}, 0x10}, 0x78) 03:31:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)) 03:31:38 executing program 0: sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb72311a0efc54bf1}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x44c, 0x3f3, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x1, 0x0, [0x280, 0x3807e22f, 0x7, 0xff, 0x2, 0x1ff, 0x4, 0xfffffffe, 0x1, 0x71b, 0x1, 0x7, 0xe1, 0x7f, 0x90, 0x0, 0xfc4, 0x7, 0x7, 0x1000, 0xcc9, 0xfffffffc, 0x8, 0x0, 0x3, 0x2, 0x5, 0x6, 0x9, 0xffff, 0x5, 0x9, 0x9, 0xd214, 0x5, 0x7ff, 0x3, 0x1ff, 0x4b3, 0x7, 0x8, 0xffff, 0x1f, 0x5, 0x1ff, 0x4, 0x5, 0x0, 0x267, 0xa7c, 0x8, 0x401, 0x6, 0x4, 0x8, 0x1020, 0x3ce, 0x8274c000, 0x4, 0x0, 0x0, 0x9, 0x1, 0x7fffffff], [0x0, 0x0, 0x1, 0x401, 0x80, 0x1ff, 0xff, 0x10001, 0x9, 0x81, 0x786437d3, 0x1, 0x8001, 0x2, 0x8001, 0xee25, 0x3, 0xef, 0x2, 0x7, 0x8, 0x7b, 0x9, 0x401, 0x6, 0x7ff, 0x9, 0x200, 0xff, 0x7, 0xfffffff9, 0x3f, 0x2, 0x1, 0x418, 0x8, 0x5, 0x4, 0x2, 0x2, 0x2, 0x1, 0x2, 0xffffffbd, 0x81, 0x6, 0x9c, 0x0, 0x7, 0x401, 0xffff36e5, 0x1, 0x6, 0x101, 0x0, 0x8000, 0x1, 0x101, 0x7fff, 0x2, 0x2, 0x80, 0x0, 0x46], [0x9, 0x3, 0x0, 0x7ff, 0x9, 0x509a, 0x4, 0x4, 0x9, 0x80000000, 0x0, 0x7, 0x800, 0x3ff, 0x6, 0x5, 0xffff, 0x800, 0x3878, 0x8, 0xfffffffe, 0x7, 0x9, 0x4, 0x9, 0x3, 0x5909, 0x4, 0x0, 0x2, 0x1552, 0x3, 0x3, 0x2, 0x7, 0xfffffffb, 0x10001, 0xde, 0x1, 0x40, 0x7, 0x4d1, 0xa0000000, 0x5, 0x0, 0x3, 0x800, 0x0, 0x101, 0x0, 0x4, 0x8000000, 0x5e, 0x80000001, 0x7, 0x0, 0x20, 0x3f, 0x695, 0x57, 0x6, 0x3, 0x1, 0x800], [0x5, 0x1, 0x3, 0x9, 0x2, 0x9, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x1000, 0x4, 0x7f, 0x6, 0x1ff, 0x7, 0xf1, 0x3, 0x7f0f, 0x9, 0x80000000, 0x81, 0x7ff, 0x3, 0x2f8, 0x5, 0x2, 0xf288, 0x7fffffff, 0xfff, 0x5, 0x2, 0x3, 0x4, 0x6, 0xe04, 0x1, 0x0, 0x2, 0x6, 0x4c, 0x8, 0x1, 0x7, 0x200, 0xfffffc00, 0x7, 0x0, 0x1f, 0x7, 0x0, 0x2, 0x7f, 0x8, 0x4, 0x4d9, 0x7ff, 0xfff, 0xffff, 0x1ff, 0x805, 0x7fffffff, 0x4a8], 0x29, ['/dev/bus/usb/00#/00#\x00', '(:]\x00', '/dev/hwrng\x00', '-(\x00', '-\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4800}, 0x8811) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/214) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:38 executing program 2: r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x4200) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg(r1, &(0x7f0000001140)={0x1, {&(0x7f0000000100)=""/35, 0x23, &(0x7f0000000140)=""/4096, 0x2, 0x2}}, 0x48) 03:31:38 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/223) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000028000000104"]) 03:31:38 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000040)=""/45) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x65, 0x5af65fc4ab3c20e3) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write$vhost_msg(r0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6744669801000000a3000200040000002910fdec26bdf691323f6fe1c2d29f82d6d40000000000000000"], 0x33) 03:31:38 executing program 2: getegid() ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x7) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x52, &(0x7f00000000c0)="b89e918e58f63f972cae42d2096dba908910e04079dd814934ad060b660b1eee91861b50544aa38c7246c4d5c97bee2104d11f251e45f076d7d9384a005d532f8dcec0e799fd39336ea891898b12b8421df3b75536c88988d9c1f4b32ecc516661db7224dfa9c615e3274ddd4e703512e2debe91"}) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x119000, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000040)) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000200)=ANY=[@ANYBLOB="ec5cceb03cc34fcb62c94b00009100000000"]) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x39, 0x2081c1) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000001c0)={{{0x1}}, 0xed, 0x200, &(0x7f00000000c0)="f70c840986d82acc5320cd1a647a21ab1310c1973c8e45b86704c72a1e49dc3820f3f4cb7e020b840b67851677dd54e95601e77d938784e1283c4846e6872bc054b996f1a4283d7fe8a8047f4d9520635c7610bffe25037ae96a7e323a6abb9d06f81f9cf095217bb2c11ffd566119d0088b27ee680eeca7ca9f37a31becc988ccffbb1f938c616edd7e378610dfe09d34c5aef42a269ce9c8df9f1823facae31815fabd6221775b7aeffb7a1acfe66cac7104791d44b7f94e3e72c9685b266285dec745f16410d42e85ab08562cdeab79813cb028526e173102e618153f23dd2e712a6688b086f3881d43ef47"}) 03:31:38 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x826144}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xe8a6, 0xe502) 03:31:38 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) clock_getres(0x5, &(0x7f0000000000)) 03:31:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10800, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r1, 0x125f, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008550e, &(0x7f0000000080)) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="6f5f0a056253ea2c"]) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/89) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8800, 0x0) ioctl$CHAR_RAW_GETSIZE(r1, 0x1260, &(0x7f00000000c0)) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/4096) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/6, &(0x7f0000000100)=0x6) syz_open_dev$usbfs(&(0x7f0000001140)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000001180)={0x2, 0x10001, 0x4}) 03:31:38 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x2, 0x0, "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"}) read$usbfs(r0, &(0x7f00000000c0)=""/208, 0xd0) 03:31:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}) 03:31:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x800) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000080)={{{0x5}}, 0x36, 0xbd, &(0x7f0000000040)="ff553b176ea82c47395bd321c1ba6e71122a61767b186612a4506baee2e34af168a3151e9464aea50d5ec5a0cbf9f322e184a78377d7"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000089fba03973a4a8f7645a8a5cb7d8f0913c679f12373bd9f0f932972948beedd4e1bb7c3b4b6d73c2d4e61895ec7e7e23fcc986a47c469b4e9375f5e1f0a8bb1870e04e68157ae9720d651260a79034f523f0b14e083f6ad810dff5bf90f0adc301f74076f36371a35ca0740a636dfc2469b4940efe8b086f422ebd7799adca720cce4d06f02ef988ba6d520"]) 03:31:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x29, 0x40000) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000140)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000000c0)=0x7f) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x240000, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="00fcffff4b00e140"]) 03:31:38 executing program 0: r0 = socket(0x4, 0xa, 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000840) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:31:38 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x400) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x9}}, 0x81, 0x7, &(0x7f00000000c0)="f63eb4ef3bc50cb9f55893ccc277e41b49562851492fac3acdb77bc0673dd66bf3606dc04c238943ab07525fbbf77d455aefc2bb374ce6bddab38582f30ee4a202d652fb0ad352229f4170f60860b7ffd138ef2af537a8503e5d2dfdd84d6c708d151950ae1516570ba0f212b351048a4080230a422265abd1396a0c09b0d4e8d5"}) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x1bdc82) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 03:31:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8a042) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 03:31:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x10001) 03:31:39 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/82) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:39 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x71c, 0x301200) 03:31:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88242) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000912462cf0e757752a1c804382569fbc4c6aebf3f75035b791a52ba08bae95416bfc7f6b5a0c5b0c901ae20488033fe"]) 03:31:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x298) 03:31:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x4, 0x7b, 0x1, 0x960, 0xffffffffffffffff, 0x80000000, [], 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x7, 0xb9e5, 0x2, 0x100800, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x8, 0x8000, 0x80, 0x450, r0, 0x33, [], r1, 0xffffffffffffffff, 0x5, 0x3}, 0x40) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) 03:31:39 executing program 5: bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0xb00, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}}, 0x40040) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008550e, &(0x7f0000000080)) 03:31:39 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb06, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000200)={0x15, 0xfb, &(0x7f0000000100)="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"}) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000240)={{0xfffc, 0x1f, 0x3ff, 0x204}, 'syz0\x00', 0x31}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x40042) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1a, 0x0, 0x6, 0x57, 0x300, r0, 0x56da563e, [], r6, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x40) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000340)={0x7b, 0x0, "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"}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0xa, 0x970e, 0x6, 0x6000, r4}) 03:31:39 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x2) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}) 03:31:39 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x7, 0x3, "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"}) 03:31:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf2501000000080004000a01010208000400ffffffff08000700", @ANYRES32=r3, @ANYBLOB="060000080004007f000001080004007f0000010c000300030000000000000006000600040000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x20040040) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x5, 0x81}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f00000000c0)=ANY=[@ANYBLOB="00008fea964d160000000000000071a8c8f4800000000000"]) 03:31:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xd}}, 0x2c, 0xfffffff7, &(0x7f0000000040)="797558ec5834c7827e1e5285fcd3dc4805f96718631a7858004f9b7862e209e58fe8539c8e5482751734c588"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000100)=0x7) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) 03:31:39 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/232) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x404500) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xc56) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffc, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000180)=ANY=[@ANYBLOB="3dffff00e400000000"]) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x2}}, 0x5d, 0x9df, &(0x7f00000000c0)="a2a198fdcdd86ec5585e604bb6e01e4919f676ebb0a7ea8de2af8962322df94c8190129146d2fd023e620d261e206aa9881d6e2f55ec29d07dc4345ee88df8a27439d19487c50ff9c46b0f95b4d0c5d1c113f5ac4d1b35b10f94323697"}) 03:31:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x610000, 0x0) read$usbfs(r1, &(0x7f0000000080)=""/25, 0x19) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/153, &(0x7f0000000180)=0x99) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 03:31:39 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x42e502) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 03:31:39 executing program 3: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000100)=0x6) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xe}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1c, 0xffffffff, 0x8, 0x8, 0x13a0, r1, 0xf4ca, [], 0x0, r2, 0x5, 0x2, 0x1}, 0x40) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x100, 0x400440) 03:31:39 executing program 0: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@bcast, @remote, @remote, @null, @netrom, @default]}, &(0x7f0000000040)=0x40, 0x0) bind$rose(r0, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, 0x40) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}) 03:31:39 executing program 1: ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) 03:31:39 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101080) r1 = socket(0x9, 0x2, 0x8) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f7000000b600000000c8dd30dafb52a0d7e3468d182de396bb04c50000000000000000", @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf2512000000050035000900000005002f0000000000060028000000000005002f000100000008000300", @ANYRES32=r3, @ANYBLOB="0600280004000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x44090) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)) 03:31:39 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0xa033, 0xe, [{0x1}, {0xb, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0x0, 0x1}, {0x9, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x9, 0x1}, {0xd}, {0xf}, {0x3, 0x1}, {0xc}]}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xc80) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:39 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x67dd, 0x2005c0) 03:31:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0xf829, 0xf, [{0xc, 0x1}, {0xe, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0xa}, {0xa}, {0xf, 0x1}, {0xe}, {0x9, 0x1}, {0x9}, {0x6, 0x1}, {0x5}, {}, {0xa}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:39 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xa03, 0x0) 03:31:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/5) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x418780) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x8}) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:39 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @null, @bpq0='bpq0\x00', 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 03:31:39 executing program 1: socket(0xa, 0x1, 0x1cae) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:39 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1153c2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080), 0x0, 0x40000001, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) sendto$rose(r0, &(0x7f0000001180)="99755b1371626a6cb6699f0adeb1ee7bb0c0931632774edc1ed0a9d3ef8c9fde4e21dc6b4964beb9a29fdee7f495fc3a91761d71a424e8256b5d7e5ed417d9b4f9ca250bd3e9a4d0f4d8ef2717af8be1dba55aaf30bdc022c87c34f91f8023af60af5e4bcdce809a2a51035f72fb2e6437bfce191affabdb73", 0x79, 0x0, &(0x7f0000001200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xff) r1 = syz_open_dev$char_raw(&(0x7f0000001100)='/dev/raw/raw#\x00', 0x0, 0xb456da534faa9332) r2 = syz_open_dev$usbfs(&(0x7f0000001240)='/dev/bus/usb/00#/00#\x00', 0x9c, 0x60100) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000001140)=0xc8) 03:31:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000140)=ANY=[@ANYBLOB="67e451c602000000b8aeb1ea4b69d28a527c4254606f0b29d713fb922bf362f52cd868024cc6efdb4e428fa6b632f6ec911db8be80bcf722948b53109c4b0d48962f80e6a216b93fe75752dbb13e58606b1a6e5be16e861f87b2fea6d3592af72224685e67e0eef2cf0d7d408f8074d08080b14cab01e27abb1216b0bf49b01d03aa1ccf03f3e8f68e25e4753c674d864f4c736bbd57ae1e0f898aa08b38c3e35d14bf7810f7701cd8cfb77b645e5c61101b6b36f71c3b4d5b"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000000c0)=0xc809) 03:31:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xffffff54) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x910d, 0x3, "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"}) 03:31:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}) 03:31:39 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) 03:31:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)={0x0, 0x1a, [{0xb, 0x1}, {0xb}, {0x8}, {0x6}, {0xa}, {0xc}, {0x4, 0x1}, {0xa, 0x1}, {0xc, 0x1}, {0x2, 0x1}, {0x5}, {0xd, 0x1}, {0x9}, {0x1}, {0x9, 0x1}, {0xb}, {0xa, 0x1}, {0x0, 0x1}, {0x5}, {0xb, 0x1}, {0x6, 0x1}, {0xd, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0x7}, {0x9, 0x1}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/140) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250100000008000700", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800f3b490863047b8d61db4f698d10700", @ANYRES32=r5, @ANYBLOB="0c0003000100000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x11) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}) 03:31:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000000c0)={0x2, 0x4}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xa03, 0xe000) 03:31:40 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20101, 0x0) recvfrom$rose(r1, &(0x7f0000000100)=""/159, 0x9f, 0x11120, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000000c0)=0x5) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008550e, &(0x7f0000000080)) 03:31:40 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0xffffffff) 03:31:40 executing program 3: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f70300012cbd7000fc070000002e2f31d51f0b4f11900266696c65302e2f66696c6530000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x30004010) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRESOCT=r0]) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x1, 0x7ff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) connect$bt_sco(r3, &(0x7f00000001c0)={0x1f, @none}, 0x8) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x5, 0xc, 0x101, 0x5, 0x5a, 0xfffffffd, &(0x7f0000000100)="cac328daf51c4b328a468d420e012857641481566157b5bb4adc15395290c6f1bc7dbe25b09195bb2a2f47b23f087b4f3fa87abf5fb8b90ada5520bbb785feb6685808cb5b9b180304e2bb01ed322517202638c41ee53ac50b92"}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x66) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}) 03:31:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/137) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 03:31:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000000)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0xf94a, 0x17, [{0xa, 0x1}, {0x4, 0x1}, {0xd, 0x1}, {0xd, 0x1}, {0x8, 0x1}, {0x8}, {0x7}, {0xa, 0x1}, {0x5}, {0xb, 0x1}, {0x9, 0x1}, {0xc}, {0xb, 0x1}, {0x6}, {0x2}, {0x3}, {0x4}, {0xc}, {0xf}, {0xe}, {0x1}, {0x5}, {0x1, 0x1}]}) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00#\x00\x00\x00']) 03:31:40 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8003, 0x50000) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0}) 03:31:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)={0x3a8}) 03:31:40 executing program 2: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x16a, 0x80000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x420000, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40001) 03:31:40 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x458}, 0x1, 0x0, 0x0, 0x4011}, 0x24) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0xf, 0x1}) 03:31:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)={0x0, 0x2, [{0xc}, {0x1}]}) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 03:31:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000180)={0x1, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0xa, 0x1}}, 0x93, 0x3f, &(0x7f00000000c0)="1604645b677de45d73f45be84f8ad06206e392b361632d44f65df0957a2c9c4ed63c221603dfbf17eccea26eb725a342d1eafafb691b0c9faa9ea01f1a898c48bb1c3d414ddeb464880ef8a6f78d3f8e5808a62308d96666caaa465cf75cc0a1ad50a61034d3ac5b77d3520c53e15db8f85beaabc4391e0aa4b20d32abe96edf68842c4e8e345dbb286875dd35d50cfde94ceb"}) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:40 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xfff, 0x20, 0x1f}, 'syz1\x00', 0x8}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x20a502) 03:31:40 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) shmctl$SHM_LOCK(r0, 0xb) 03:31:40 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x240800) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x8c042) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x103000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000200)=ANY=[@ANYBLOB="170028000002009d9d740400b8dc9cdb7e003cb3eed64a63186237df414f0626600c9d35eb2a0f614fa6bf2acc0f1a3fcda95f0487f71cfee5d76e6bde8fd0ae68a670a524342458a914f3cbcd343fe9b4c04dd0c1bb8bd83fd6bdb0bc595804f5474fc5ab9b63eb19cfef77f59d62424cccf862b21f57b76b3b895b01579ef9bc261519ab021151cb9be0763960f251e67e78d965eb63c4a496c3e686e8daadd158f0fcf0e4a1c09b7cc3837c0183c4601d5bad4cde7156413ea38580c8b998f18929a0783be52263fec04fed3d88332949101daab8773aeea7e7f2b8719ec0c7e3a2d251d007"]) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8001, 0xc0040) ioctl$USBDEVFS_RESET(r0, 0x5514) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES64=r0]) 03:31:40 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2102) 03:31:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)=ANY=[@ANYBLOB="00450f0000000000cc7a94eeaafa78d5fe35922e0c57ea228bf167ee4b0d"]) 03:31:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x7, 0x154565f37388ea8e, "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"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x6b36}) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8c0) 03:31:40 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff000, 0x210000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000100)={0x0, 0x13, [{0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x6, 0x1}, {0xd}, {0x1, 0x1}, {0xd}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0xf}, {0x3, 0x1}, {}, {0x9}, {0x4, 0x1}, {0xb, 0x1}, {0xf}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0xc0841) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) 03:31:40 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb04, 0x400000) 03:31:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r0, 0x125f, 0x0) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)={0x0, 0x2, [{0x5, 0x1}, {0xf, 0x1}]}) 03:31:40 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7436, 0x507c42) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$rose(r1, 0x104, 0x0, &(0x7f00000000c0)=0x658, 0x4) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 03:31:40 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0x1, 0x1]) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x8, 0x70bd27, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x404c090) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x8) 03:31:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x40) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 03:31:40 executing program 5: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x3) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6fde, 0x4cc142) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000100)=ANY=[@ANYBLOB="030001000002000008f4e2188cfa5e33b1be1d09f5a5fc0b68906f051a13543295f017268bdd629ad74c038628ad9d332c3064172fb44ad9009808ca23585f1a2ac1cc20fdfd8f11c67f808b785c0d68a7762d9263d2419f2bc0dbacab06609a8e2349a5695a34dd4ac4ac073c56ad1e3cd8617e553d624f97ec13b07bf2991a65a4df591a6c58953fd7586e59ccc31f8da64f0fa72545742c647e209b95476d73303f015d6aea139a28b02e16b9c3d886c5ba5309043619e458c78c59ae5dd6"]) 03:31:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0xc500) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'veth0_macvtap\x00'}) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0}) 03:31:40 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/77) 03:31:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x3f) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x189000) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000000c0)=0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000001dc2a5a845f6992ee2266da9a101244cc8641c2d724b3887f6a63f39040b760bd9cd486341ba92e4ca662bcd69b360469d66a9262cfc35be2792dce51678c098b6fb8c67b8faaff95d318c535ecc869839be35af17f8e950113de771e80458cc94659238853bd5e76440c55c3736c30cdf7a3b757f0800000041434b5278e6f753ba0cf92860097b2952f9080d1c05e2d909bc799337e09841460a187db6fbc4d3b803c09a7d6a8222a92b275cd6c16de5e9f928"]) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0}) 03:31:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x127003, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000060a00000000000072b700001839000003000000000000000000000018210000", @ANYRES32=r2, @ANYBLOB="00eb1a150900ffffff0300042e98b5429f59b6c6"], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0x94, &(0x7f0000000100)=""/148, 0x40f00, 0x8, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0xda, 0x5}, 0x10}, 0x78) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0xfffff000) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00']) 03:31:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x103480) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x5) 03:31:40 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/56) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3f, 0x101000) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x2, 0x1, 0x10001, 0x2, 0x2, 0x21}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xeacc) 03:31:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000016000000"]) 03:31:40 executing program 2: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@netrom, @netrom, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x40, 0x80800) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xb862, @null, @bpq0='bpq0\x00', 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:31:40 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0xa800) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x28000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0)=0x1) 03:31:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0}) 03:31:41 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:41 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x8000) 03:31:41 executing program 2: r0 = socket(0x3, 0x4, 0x4) sendto$rose(r0, &(0x7f0000000000)="f0ac3d1d2167e2950ef98cf149f1d59a144f151fb2a5959de6d204f9fabb535ec8555b6cf0e55f11c5b78d61e552e0f7c0b15ffb47c70c83d33d474e212d3a661c90d7826dd54a70d81341afdeef7206f51009af5ce4ee75ea361b7bb8c8160726f6d9697d194dad4dc9c78c6f4d9f41e7059944ef007847f2bb0a", 0x7b, 0x4008001, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 03:31:41 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x401) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008550e, &(0x7f0000000080)) 03:31:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x45) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x9) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000002cfc9c692be8baf8463031c139b97eef266042990d78e883001fdb009bd4893b31e364cc92590fbeb07600b96d15e0cc510856b9e0b52015eba2322dc57c851b11224353006d8cfcba8d7e517eca15e9fed40046dfe066a8793654bb57d4f53b20aab1b9c934d049ede3437bde980057b6238649b1d45fdd95f63d5ad33c99b125a6348deaa9446645de25e332288a1a58c11df014d7a73085f2560bc06262efbcadf3744940ddf6e03b3e291"]) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x2) write$vhost_msg(0xffffffffffffffff, &(0x7f00000002c0)={0x1, {&(0x7f00000000c0)=""/211, 0xd3, &(0x7f00000001c0)=""/238, 0x3, 0x2}}, 0x48) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0}) 03:31:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x14, 0xb5, 0x87e}, {{r0, r1/1000+60000}, 0x15, 0x9, 0x4}], 0x30) 03:31:41 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffff, 0x40100) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1000000000000002, 0x484883) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0x9) 03:31:41 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x8e502) 03:31:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0xfff) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 03:31:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0x100000}) 03:31:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x200) 03:31:41 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@rose) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x28500) 03:31:41 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x60001, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 03:31:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x100, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, &(0x7f00000000c0)=""/136, 0x88, 0x8001, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x6, 0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="fffff2fe6048000031d8dc2721"]) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 03:31:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 03:31:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x80200) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0xc}) 03:31:41 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x7, 0x0, 0x3, 0xcd, 0x8, 0xfffffffa}) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x800800008) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0}) 03:31:41 executing program 2: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0xfffa) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 03:31:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x80100) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x121200) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f00000000c0)={0x1124, 0x1b, [{0x3}, {0xd, 0x1}, {0x9}, {0xb, 0x1}, {0x9}, {0xf}, {0xa}, {0x8, 0x1}, {0x6}, {0xb, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5}, {0x2, 0x1}, {0xd, 0x1}, {0x1}, {0x6, 0x1}, {0x7}, {0xf, 0x1}, {}, {0x1}, {0xb}, {}, {0xa}, {0x2, 0x1}]}) 03:31:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8040) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000001c0)={0x0, "112daf73587403dfcb2d729707367a2658a6b68d35bbed6896a2088e112489dedccc8e93e71331cb4b01b9e539920c9817b9d06c1ac2e29f142f93961d27ee1b646623f01173642f368dbc68a3e7324f37b8091bb9fc1a97ffde069620bedcbe21e775f9d97c3b0f0a7d965468f3a6e72c988179ea8ca8e972056e8e883098fe4f1eb54038507085bae224d466b5fa8846b73ba52d7cd7e274c776c26b03b4e85c4bcf5cc4592eab3bd07e736c94c2c8ab75f5ff7c009adce9c3a473cd600f22874d3682f4d9dd7c39c4a458b490221e18afa44103f00b11c385b0ff1ccf4eb476264d393cea343ceb1a8c6dec264a412eee8486fecd4cd9d6b0e42304da33b6"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/192, &(0x7f0000000040)=0xc0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) r2 = socket(0x9, 0x6, 0x86c) r3 = syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x404041) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000440)=""/201) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000000)) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0}) 03:31:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) 03:31:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x448000, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:41 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:31:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) 03:31:41 executing program 4: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x80042) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x10400) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x20, 0x0, 0x0, 0xfffc, 0x0, 0x200, 0x0}) 03:31:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20010007, 0x601) 03:31:41 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb06, 0x0) 03:31:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @null, 0x0, [@remote, @rose, @default, @rose, @rose, @rose]}, &(0x7f00000000c0)=0xfffffffffffffd1b, 0x0) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000140)) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) bind$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:41 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb01, 0x167d02) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x60, 0x0, 0xfee2, 0x8001, 0x0, 0x0, 0x0}) 03:31:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:31:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044005}, 0x4044004) 03:31:41 executing program 0: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x2}) 03:31:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x28042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:41 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000b03, 0xe502) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/4096) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000010c0)=""/165) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x416002, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001180)={{0x6, 0xc, 0x209, 0xe20}, 'syz0\x00', 0x23}) 03:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x80, 0x0, 0x0, 0x7ff, 0x0}) 03:31:41 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7bf2, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40cc0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x8, 0x301000) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaff, 0x0) 03:31:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x28e500) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x62, 0x212800) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000000c0)={0x4, 0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000140)) 03:31:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0)='gtp\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ba8fac8d077a"}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x48080) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="dd27d6f4a28040bee312d8b8a54f10928ecfb6edfbb7f6fee3f22a71cecf17dba6aad4dd86c21e46bdfd66f175952c3e2bfd403643382e292bb79aec9a6b0e819cd4c85e75d3a1c09066548d20c951d6162af59e8fa352587b90630a07f702e52a6bab682edbbb08d608388a0d975a61ad06f9ed1f756b27076f3a39f3e1e199ec145d6f75a5d4e868317d0375d9a819579dae93d5a554b2d25761410ff06973d411c049502790328dad016899566f59b7ec79f7b2295d52a77a9af73dafcd4b4ded1ab87fa61ed246513b096fd2c7bc2614cf94456eca8b88e09d21ae3b662633fa6b846399c8dc5ba3edc0d970", @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000"], 0x14}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x333280, 0x0) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000500)=""/114) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\b\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000030000000c00000008003200e4000000060028000200000005003300f7000000390001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40051) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x280a81) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x200) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000700)=0x5) read$usbfs(r8, &(0x7f0000000780)=""/24, 0xffffffffffffff79) 03:31:41 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x401, 0x80400) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)=ANY=[]) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x4) 03:31:41 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)={'netpci0\x00'}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x2, 0x1ff, 0x7, 0x8}, 'syz0\x00', 0xc}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:41 executing program 2: socket$bt_bnep(0x1f, 0x3, 0x4) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:41 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x210c00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)=""/255) write$vhost_msg(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8004551a, &(0x7f0000000100)=ANY=[@ANYBLOB="3c51515eb2300bf1dd004a000800003000"]) r3 = syz_open_dev$char_raw(&(0x7f0000000080)='/dev/raw/raw#\x00', 0x0, 0x12000) ioctl$CHAR_RAW_RRPART(r3, 0x125f, 0x0) 03:31:42 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x3, 0x30, 0x9, 0x9, 0xa3, 0x4, &(0x7f0000000080)="372ad2ca86537256a620019c79eaebb800df2c9b5bfdd71a24caefa12ac0831ab1a0a17f570b9b072098b696a753e3b394b816eacf1e7339757c4efdd5ca72e056b624d79549660a9ce69489a89b467706742d60294e3299a3079c50a2106f57eb1aa6ea5c8333952ad84476c204e4faba2a0ea5f156145c7d21a98ee39d56ec2f23557cc15db4ca7b41493ba7d7421406a9e8ad40470cf989cbd8435e15094e7bdcf4"}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf25120000000500380001000000060028400400000008003a005f02000008003b002004000005003500cd000800080034000e00000008003a0040400000002c00fbffffff0500330000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0xa8843) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:42 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb02, 0x404040) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x102, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x80000001, 0x7f, 0x5ff, 0x100, 0x3f, 0xfffe}) 03:31:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000a07a"]) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x9501, 0x17, [{0x3, 0x1}, {}, {0x9, 0x1}, {0x4, 0x1}, {0x7}, {0xf}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xa}, {0x9}, {0xd}, {0x8}, {0x5, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x9}, {0xf}, {0x8}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x204, 0x7]) 03:31:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) 03:31:42 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x978338f80588fb8) 03:31:42 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x9d) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xd23, 0x0, 0x1, 0x0}) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="3f0e000007000000"]) 03:31:42 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1) 03:31:42 executing program 1: clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{r0, r1/1000+10000}, 0x2, 0x9, 0x1000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8004551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000009c888ad96c"]) 03:31:42 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000001c0)=0x100000001) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x9, 0x1}}, 0xf6, 0x400, &(0x7f00000000c0)="042dec3489cd099a5d8241eeba974bf31a39a40e3e5717ebd01c985191301ea0a1948ac2d7938d6fd00beb27284388bfc61205220b0795f5e0ec68fc46ec7d74519ea95d8c225429c10c9fde4087f1534bbec9a3ea2605c687e3998f2a3ad3742733ec45fdb86983368711270d34b34b4e2a521d8812857baafc411bd6f45095bb0ee3fe37c7fa6aa183dd185c730db344170b6f9f8afc5ef3ddfb48d00cffcd0e6f3d08ffe18b114a213a852ed42a7f4728fb3a7c8df546f2b30d04f4b943a50644eb5f3fc89b8363b75b0b3124a90f61b50affed001a543877316668d873e589e087239b7abe9c3933b878218926e4a65257ccf1fd"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 03:31:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) getsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x402000, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x1ff, 0x80800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x2c8800, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000400)=""/113) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x1) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000040)=""/9, 0x9, &(0x7f00000000c0)=""/75, 0x3, 0x3}}, 0x48) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000280)=""/115) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) getegid() ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000200)={0x3}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 03:31:42 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88542) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000041d029ee6cbef115592b38f686e18b66f575e5953f5524cb"]) 03:31:42 executing program 2: socket$bt_bnep(0x1f, 0x3, 0x4) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x400) 03:31:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x100, 0x7, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x703597d}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:42 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)={0x789f, 0x9, [{0x1, 0x1}, {0xa}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/cgroup\x00') 03:31:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xdbe, 0xa9742) 03:31:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x4, 0x0, 0xbffd, 0x0, 0x0, 0xd2, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x100) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7f) 03:31:42 executing program 2: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000002c0)=""/54) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0xc000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/6) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @default, @bpq0='bpq0\x00', 0x0, [@bcast, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1f) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r6, 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r6, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/592]) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000001c0)=""/107) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:42 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x4, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000140)={{{0xe}}, 0x74, 0x32, &(0x7f00000000c0)="fef7b73149c397c667ec40f2a38bd81a6ae6c8f1fd230b5bb32c713316b0421021bdbf0bf61aa412cf29a2cca7da2169dfb805b9e7c18db857d51eaeccace58a2715750600f32751c09bf221f2472971198819bedec14e6780bae8180d46477cce07c18ea3dc34cb69555879ca91d266f34d9232"}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f0000000080)) 03:31:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000040)={{r1, r2/1000+60000}, 0x11, 0x6, 0x7}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80000) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xff, 0x4) 03:31:42 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE64(r0, 0x80081272, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200000000000aac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() clock_getres(0x0, &(0x7f0000000080)) 03:31:42 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x8, 0x6, 0x0, [{0xffff, 0x7, 0x7fffffff, 0xe9, 0x1, 0x4}, {0x9, 0xfffffffffffffffa, 0x8000, 0x0, 0x55, 0x20, 0x3f}, {0x1, 0x1, 0x8, 0x5, 0x0, 0x20, 0x1}, {0x4, 0x8, 0x0, 0x3, 0x1e, 0x2, 0x1}, {0x484, 0x8, 0x205b, 0x7, 0x81, 0x7f}, {0x10001, 0xe8, 0x7f, 0x9, 0x5, 0x9, 0x7}]}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x6403) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x6, 0x9, 0x97, 0x3c, 0x7fffffff, &(0x7f0000000040)="4ae976bcd4de1c117f7866e291f2628b3ca902f96357c6a3c53df80e1f1f343c4d904c7f4a694eb843710711235a07851b32b34fda17f8fc16043b51"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:42 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x21e082) 03:31:42 executing program 1: ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) 03:31:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x80102) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/4096) 03:31:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8841) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200000000000aac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x3, 0x0, 0xfffd, 0x0, 0x2b, 0x80, 0x0}) 03:31:42 executing program 2: r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x6088c0) ioctl$CHAR_RAW_PG(r0, 0x1269, &(0x7f00000000c0)={0xab8, 0x6, 0x36, &(0x7f0000000040)="ca4dc19ea29b2e0708c2c99fcf40d760bebe2b9882e4acc57852bd1d3b4f290e2b0d83799ca11f6aedd405a7e1ee65139ed5fce7f168"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) socket$packet(0x11, 0x2, 0x300) 03:31:42 executing program 0: r0 = shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0x9d16, 0x1, [{0xc}]}) 03:31:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="879ee3184a49113f"]) 03:31:42 executing program 3: ioctl$CHAR_RAW_GETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x6, "550034b7fe9ac16d106a605f319a9f96e7478d8ab001d6c55506638ecb9b8d19686fc57545ad19c333f5ce8c585e9f1b99b84da08b702e2fbf6dcaf5a721fc9dac6e59f47b81443d77a1a46cbc793b5274437070a8bc8a0983d153569d660807d804a1907c8ec5c691349a4f461c24c712ae932d78593129584b744b5ae7b0b364128739c72c04240681a3cecd5607b0f33999f9e7463af6f26d6a9cf9f14006e3b5be8ef75ee17377864b9fff68615560710c7a34cf3d956952da40c650c8e2641781d51e050dda58f65aa4607899df14311370a5219a62f2da962fcdeb0b2b08eeb332c79e36d8fa3ab56f375989327430b9bcc64b441a9ad730096e9874dd"}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000200)={{{0x4}}, 0x53, 0x335, &(0x7f0000000000)="35beaa8fef3adc44ef702cb1cda1225ca369cf09a1e11ca5aa5335dd16a35fbe881132e18f308463efe6a4a6e8cdcba2025adb72a3e58646284ac2e00f1b50ec005a35827ae437e4f7875be4feb7554cb4dc87"}) 03:31:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}) 03:31:42 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb01, 0x40040) read$char_raw(0xffffffffffffffff, &(0x7f0000000200)={""/1025}, 0x600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x5, 0x7, 0x40}, {0xfc00, 0x2, 0x9, 0x6000}, {0x86, 0x40, 0x0, 0xc07c}]}) 03:31:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0xb313}) 03:31:42 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000040)=""/65, 0x41, &(0x7f0000000180)=""/139, 0x2, 0x4}}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008550e, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000828100f380e5964b30c6d09330e5e62f1c182bb8d1d3569c7ce4194d2181b6aa60f392e0e724f02a9bd093dcfb6d32f15534a4f9d713ca2f3ec949fec7bc063219f622fce49b9c52ae74311f4efd0744dfe63a334a7cf7af2aa59f2652f5fd80bf620fcbec"]) 03:31:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xd) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x1d, 0x9, 0x4, 0x4, 0x9}}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000040)=""/98) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2d1, 0x0) 03:31:42 executing program 2: geteuid() syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:42 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xbe, 0x402000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/162) 03:31:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x300, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x800) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)=ANY=[@ANYBLOB="c4f548b3724765a12c1940a7ae0000000000000000"]) 03:31:43 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x1) 03:31:43 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x64001, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/96) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x8354, 0x5652fd60, 0x9d, 0x9, 0x1, 0xfac}) ioctl$USBDEVFS_RESET(r0, 0x5514) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:43 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x200d00) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x48c000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x4, 0xffffffff, 0x2, 0x2, 0x7, 0x7fffffff}) 03:31:43 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x0, 0x2710}, 0x3, 0x930, 0x80}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x400, 0x101000) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}) 03:31:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="dcc1000000000000028c030e8d0a8e8907880f8d8c068a0f0a"]) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x23c280) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80) ioctl$USBDEVFS_RESET(r1, 0x5514) 03:31:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x101f02) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001140)={{{0xc, 0x1}}, 0x1000, 0x6, &(0x7f0000000140)="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"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480000, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000001180)={0x0, "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"}) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2900, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000012c0)='NET_DM\x00') ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000100)=0x5) 03:31:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x200) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x2000) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)={0x5}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000040)={0x4}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x2a0f, 0x4, [{0x3, 0x1}, {}, {0x3, 0x1}, {0x8}]}) 03:31:43 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @bcast}, 0x1c) 03:31:43 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) write$vhost_msg(r0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7fffffff) 03:31:43 executing program 1: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffa9"]) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000180)=0x81) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000040)={{{0xa, 0x1}}, 0x42, 0x228d000, &(0x7f00000000c0)="5b58f46640de454d1f4d45ce6440b725fd9eff21882708c4a5e07180f75b95377f173c73f1fca7d69be336ec23617256a376cff453abed2df0d2421d3495167304f0"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz1\x00', {0xc00, 0x4, 0x8, 0x6}, 0x19, [0xeda, 0x5, 0x4, 0x0, 0x9, 0x4, 0x6, 0x1, 0x1, 0x1, 0x8001, 0xb73f2a3e, 0x2, 0x3f, 0x4, 0x5, 0xc00, 0x2, 0x6, 0x1ba, 0x0, 0x3f, 0x2, 0x4, 0x5059, 0x7, 0xdc, 0x2, 0x2, 0x0, 0xceb, 0x8, 0xfffffff9, 0x5, 0x8, 0x0, 0x766, 0x4, 0x4, 0x5, 0x32, 0x8001, 0x8001, 0xffffff11, 0x8, 0x2, 0x9, 0xfffffff9, 0x1, 0x8, 0x3f, 0x603e, 0x4, 0x6, 0x8, 0x3, 0x2e1857b, 0x400, 0x81, 0x1, 0x8000, 0x1, 0x0, 0xffffffff], [0x8001, 0x5, 0xff, 0xae, 0x6, 0x1, 0x0, 0x1, 0x5, 0x9, 0x2bb2e568, 0xff8bdbd, 0x7f, 0xb10, 0x0, 0xffffffff, 0x436, 0xffffffff, 0x1, 0x5d6, 0x86, 0x100, 0x80000001, 0x10000, 0x0, 0x7fffffff, 0x6, 0x3, 0x101, 0x4, 0x56, 0x4, 0x9, 0x2, 0xfffffff9, 0x8, 0x0, 0x1, 0x0, 0x1, 0xfff, 0x10001, 0xfffffff7, 0x8000, 0x7, 0x3, 0x1, 0x401, 0x0, 0x8, 0x7fff, 0x4, 0x3, 0x4, 0x8, 0x3ff, 0x1, 0x4, 0x8, 0x6, 0x100, 0xf6, 0x401, 0x1], [0x2, 0xfd4, 0x800, 0x7, 0x735a000, 0x4, 0xa643, 0x7, 0x7, 0x9, 0x7f, 0xffff, 0x7fffffff, 0x800, 0xfffffffc, 0x264, 0x81, 0x620f, 0x0, 0x5, 0x2, 0xff, 0x10000, 0x100, 0x9, 0x308, 0x0, 0x6, 0x8, 0x9, 0x101, 0x7, 0x8, 0x6, 0xfd7d, 0x1, 0x5, 0x8, 0x9, 0x9, 0x6, 0xfffffffb, 0x5, 0x1ff, 0x6, 0x7fffffff, 0x3, 0x4887fc0, 0x80000000, 0x80, 0x3, 0x80, 0x8f8, 0x2b371e07, 0x3, 0x0, 0x8, 0x40, 0x20, 0xffff, 0x5, 0xfffffffb, 0x1], [0x2, 0x5, 0x0, 0x1, 0x3294af99, 0x8, 0x101, 0x1, 0x0, 0x7f, 0x94, 0x1, 0x0, 0x80000000, 0x3, 0x8, 0x40, 0x0, 0x81, 0x10001, 0x0, 0xfffff801, 0x60955a72, 0x4, 0x5, 0x40, 0x1f, 0x3, 0x100, 0x9, 0x6, 0x5, 0x7ff, 0x6, 0x1, 0x6, 0x7fffffff, 0x6f2, 0x6, 0x7, 0x0, 0x7724, 0x10001, 0xbf, 0x1f, 0xe30, 0xfffffffc, 0x0, 0x3ff, 0x0, 0x3f, 0x9, 0x81, 0x0, 0x3f, 0x81, 0x1, 0x292fda12, 0x2, 0x9, 0x2, 0x9, 0x6, 0x1]}, 0x45c) 03:31:43 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0xe002) 03:31:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb634, 0x6000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={0x0, 0x1, 0x10001}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x4, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000000c0)={0x9, 0x9}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x9, 0x2}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xa) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x208000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000180)=0x1f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:43 executing program 0: getegid() r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc4201, 0x0) ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f0000000040)=0x659) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0xd}}, 0x37, 0x1, &(0x7f00000000c0)="0aecd4acfda8e3da90d84865c7cdfe072617ad6997a1eb0ec2f4d2c2703dcf68cf64bbd48e402df117caf98a026aa6483968814b1be681"}) r2 = syz_open_dev$char_raw(&(0x7f0000000180)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_RAGET(r2, 0x1263, &(0x7f00000001c0)) socket(0x1e, 0x6, 0x70) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000140)) 03:31:43 executing program 3: ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x5a0d, 0x14, [{0xb, 0x1}, {0xf, 0x1}, {0x7}, {0x5, 0x1}, {0x2}, {0x8, 0x1}, {0x2, 0x1}, {0x1}, {0x9}, {0x5}, {0x7}, {0x5, 0x1}, {0x6}, {0x6}, {0x4, 0x1}, {0x2}, {}, {0xe, 0x1}, {0x9, 0x1}, {0x5, 0x1}]}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000000c0)=0x50) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x8b80, @local}) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0xb, 0x1}}, 0x49, 0x3, &(0x7f00000000c0)="9ef766b3fd671e090e972e2de47cddb22491ebb382c0ed35a02babfa2e09aa71d14a591387c32d5c25f6088f9921f6ece3d865bfb99d18812969e68115b3c33003825a94553287e768"}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f0000000080)) 03:31:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000080)={0x7}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400880, 0x0) read$usbfs(r2, &(0x7f00000002c0)=""/242, 0xf2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) write$vhost_msg(0xffffffffffffffff, &(0x7f00000001c0)={0x1, {&(0x7f00000000c0)=""/150, 0x96, &(0x7f0000000180)=""/45, 0x2, 0xb}}, 0x48) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000480)={0x60, 0x17, 0x9, 0x4, 0x81, 0x8, &(0x7f00000003c0)="eaa4c6440f63f4c45e06de5308d09a5f7f798fb6cd99e1eb350d7b5574ea759cef08875d80f41a694e73778135dc0047b74b15f06b38161832e6418328060cd9550ed21269a07287482e2c6820a6b8e27e54bb3be44853625ab5e5028be0b9a34f3f99eb4ad37f80eba3413ca735cc2a19fec4b27450e9a0afc5110481dcb40858"}) 03:31:43 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}]}) 03:31:43 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='free_extent_state\x00', r0}, 0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1400000000003b) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:43 executing program 2: ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x2) 03:31:43 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x7e10c2) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x10000, 0x6}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:43 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) 03:31:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x88002) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 03:31:43 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x402, 0x0) ioctl$CHAR_RAW_FRASET(r0, 0x1264, &(0x7f0000000040)=0x2) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:43 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80, 0x0) 03:31:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0xabb8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0}) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88040) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000000)) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{}, 0x14, 0x0, 0x89}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) clock_gettime(0x4, &(0x7f00000001c0)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x64) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000000c0)=""/210) 03:31:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="f1ff18ff00000400"]) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x4, 0x4, 0x0, [{0x6, 0x400, 0xffffffffffffffff, 0x3, 0xc0, 0xa7}, {0x7fffffff, 0x3ff, 0x4, 0x7, 0x3, 0x7f}, {0x49f7, 0xff, 0x958c, 0x2e, 0x1, 0x7f}, {0x80000001, 0x80000000, 0x1, 0xc8, 0x7, 0x3, 0xa1}]}) 03:31:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x401, 0x410001) read$usbfs(r0, &(0x7f0000000040)=""/109, 0x6d) 03:31:43 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb07, 0x101142) 03:31:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x100, 0x1ad8c3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x16, 0xb1, &(0x7f0000000080)="14fde7d863f41971493f3117dfa4c888c999facf61216cab9ab07a2b3813ed62184aff0db6d8a88721842fbd3f99b6628c5bed6713ba8b8fd2aaa740b6bb07360da52688978e443c500e772e1c78b900ce9facbd8875977cd524521b0ff1e75d79131adfba79aaf4650a19038a16a5350645866451a33c821387ab204890a7599a5ea73c565a536eacdd9a7de24ba2adec6ded1ce8803b8937c83a117030bca097c347653e4f0df281fed5e0f74c2229d1"}) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac6, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') 03:31:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x4, [], r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0x9d400000, 0x1f}, 0x10, 0x1002d}, 0x78) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x400080, 0x0) write$vhost_msg(r0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000005008976ba8e1888e2868977105a300000"]) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r7 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r7, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000080)='ns/time_for_children\x00') write$vhost_msg(r6, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40041}, 0x4004) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x8, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') 03:31:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 03:31:43 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb04, 0x40e542) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x81, @bcast, @bpq0='bpq0\x00', 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @default, @default]}) 03:31:43 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000000)) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) 03:31:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) 03:31:43 executing program 0: ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3ff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000100)={0x7b, &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) 03:31:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x7) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 03:31:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) 03:31:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) read$usbfs(r0, &(0x7f00000000c0)=""/221, 0xdd) 03:31:44 executing program 5: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/145) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x8, 0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = semget(0x2, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 03:31:44 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) 03:31:44 executing program 4: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x105000) 03:31:44 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x400080, 0x0) write$vhost_msg(r0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000005008976ba8e1888e2868977105a300000"]) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r7 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r7, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000080)='ns/time_for_children\x00') write$vhost_msg(r6, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40041}, 0x4004) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x8, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') 03:31:44 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd6, 0x10000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0) read$usbfs(r1, &(0x7f0000000100)=""/4096, 0x1000) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) 03:31:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) read$usbfs(r0, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:44 executing program 0: socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x10001) 03:31:44 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x28000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x6) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 03:31:44 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) 03:31:44 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xe2e7, 0x0) 03:31:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0xc200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000064bccc4eb81aaa73f4584ab378066a8876d03718f75ada70be6eb6b5e8eb831ed7d34c9f9b109b03f38dae3f0646a725c109f3d9629feb112330780a53208a8e6284db3112f40ecc129e5760c0ce703890407ba44694ed8fede972b07b828f7ab33bfed0849e94aa13617460368677092bc585e5505f4afd733d867e0a6a4b085f0bed8964c1f4c78c05839d4498faf1880e6ce1a327e3b74079"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x442080, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000240)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/163) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0xc) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000040)=""/43) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0xa, 0x8, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x7fa, 0xfa, &(0x7f00000001c0)=""/250, 0x41100, 0x5, [], r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x9, 0xfff, 0x2}, 0x10}, 0x78) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8004551a, &(0x7f0000000400)=ANY=[@ANYBLOB="94f00c000000002000a91a9de0035f467896ccb6ed139ec24cdc45df963a8acc6a11d0350547bd06a24c1bab449470dc05c45fc47e0733d4e879c93b8a6e8b45da034eafe19104174ad9140c0f164708125ede9f29f6817238a437811fa8edb7578041ecf4040331975c63f51e0080dd685d6dfed28b2f9420a75021c37c76ae48871f0e120bde9077e3a9116a"]) ioctl$USBDEVFS_RESET(r0, 0x5514) 03:31:44 executing program 4: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0) waitid(0x1, r0, &(0x7f0000000040), 0x1, &(0x7f0000000180)) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000000aac2, 0x4bac82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x9, 0x2, 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0xffc0000, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48000) 03:31:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x8, 0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = semget(0x2, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 03:31:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xbcf5000000, 0xc0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000000c0)=0x4) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:44 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x1) ioctl$CHAR_RAW_REPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0xab, 0x3, 0x0, [{0x3, 0xa4, 0xae, 0xff, 0x6, 0x6, 0x33}, {0x1ff, 0x0, 0x7, 0x5, 0x80, 0x0, 0x1}, {0x7, 0x7, 0x401, 0xfe, 0x6, 0x7, 0x81}]}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:44 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101101) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="811b3e2a16b03c53e8b3a5746245931d07744971b88f5c8c07ff0938e6333440c53ceeb6013e7604bd6c0fa561dcfe83593668930e3d6b9062eab5785ab4ea4a6d5339538563c11b49a19ed10a45c7b767d7c97e248a791da33185c9dada246ddc39de9ffea89f77d92e71fe9fdfe32695b6583321989beb8c3d5c0a746d27321e3e521ce245bdf093253b15034821624ab2fcb58c79878c860b43c118cc4c1f8679ff30d68b974fdf8390575a61d5bc6c5a9d08a819b73e7f67b25f87ca10b1792848fbd9c86821418035c4037b043027b987e3f3175e394b75067e25053e77dd8717a906dbfdee3faaa9c19970a04758b44bd3d8dd", @ANYRES64=r3]) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1000, 0x804000) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000000c0)=""/75) 03:31:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000002c0)) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x7b, 0x41, &(0x7f0000000100)=""/65, 0x40f00, 0x3, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0x0, 0xff}, 0x10, 0x7ea6, r1}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r2}, 0x10) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000300)) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x15, 0xfffc, 0x4000, 0x0, 0x0, 0x0}) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0x965a}) 03:31:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x8, 0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = semget(0x2, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 03:31:44 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:44 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x230001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendto$rose(r0, &(0x7f00000000c0)="6d7654439dc3aba62140556de0d876be3b98288869a9b17f0252430c5c77d890bd6212812b3dcefb40b0312134fbe3a814b1ee5edabb739f9fd20dd7ff1aead412cfea2fcf7968ab604e97da1d762247534df1e4d6c019334e85342e023bfe92d9b77c0bb4e7bf80413ddc9238e6a0f46f70e489c9b943cbb9c900da4f704fd218d74516b4b13e42567913a54136812e6ac40f6ce661afa247cabcefadcc0f5c4af4a3c4d84b308d889e239026ab6094e8e65dbb2f16d083181ef49af5ec62c423963cb07045228933309845b808ad4b3d61746a6e3117dac599b67926cb71230457aa7255", 0xe5, 0x8040, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xe33, 0x3, 0x9, 0x4, 0x80000001, 0xff}) socket(0x5, 0x5, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f00000001c0)=0x4) 03:31:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10003, 0x0) read$char_raw(r1, &(0x7f0000000200)={""/2691}, 0xc00) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0xcbd7, 0x8, [{0xb}, {0xe}, {0x7, 0x1}, {0x8}, {0x5}, {0x2}, {0xa}, {0x9, 0x1}]}) 03:31:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x8, 0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = semget(0x2, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 03:31:44 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x151802) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x8, 0xfffffff7, 0x9, 0x88, 0x3, 0x80000000}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/127, &(0x7f0000000100)=0x7f) 03:31:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x3, r3}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x680, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x7a1e00, 0x0) write$vhost_msg(r5, 0x0, 0x0) recvfrom$rose(r5, &(0x7f0000000280)=""/1, 0x1, 0x100, &(0x7f00000002c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x40) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x800, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000180)=ANY=[@ANYBLOB="8e00000000000000a5ea10a61ce9b15682278cbc6b2b980ece716bd996fb84ab3ffda516218d469d16ad75aec853dcca14e86f0e96135b9655922e43648126ccb5888166b454b0f34ee5b2c6dfb55c25b7a2099294c3281d21637fe687b1e12bb5af8a952c706c1012705419b438173b85b1ae231594322236db4a5af1114dc27512f472b2883bee14c5987b4e0093f5285901ff8ba81d52485bbe896bf538384e720ed51a035bddc43b4d0f907db64bfe66d741d36aece303b10366f67d24e2e4aaedc92d058fb234f33898ed1dfe1694ca6ba7e5589d1ab7e7f5870f5f2e14a8d2f6ad39cc1f38345fc2221a12dc731d36ff35366357"]) 03:31:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x200) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x3, 0x6ad]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x60, 0xd, 0x0, 0x8cd9, 0x0, 0x4, 0x0}) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x9) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:44 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xe2e7, 0x0) 03:31:44 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) pkey_free(0xffffffffffffffff) 03:31:44 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) read$usbfs(r1, &(0x7f00000000c0)=""/16, 0x10) 03:31:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0x0, 0x6, [{0x6, 0x1}, {0x9, 0x1}, {0xc}, {0xd}, {0xd}, {0x2}]}) 03:31:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c4) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x728c, 0x42a8c2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) read$usbfs(r0, &(0x7f00000000c0)=""/167, 0xa7) 03:31:44 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x230001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendto$rose(r0, &(0x7f00000000c0)="6d7654439dc3aba62140556de0d876be3b98288869a9b17f0252430c5c77d890bd6212812b3dcefb40b0312134fbe3a814b1ee5edabb739f9fd20dd7ff1aead412cfea2fcf7968ab604e97da1d762247534df1e4d6c019334e85342e023bfe92d9b77c0bb4e7bf80413ddc9238e6a0f46f70e489c9b943cbb9c900da4f704fd218d74516b4b13e42567913a54136812e6ac40f6ce661afa247cabcefadcc0f5c4af4a3c4d84b308d889e239026ab6094e8e65dbb2f16d083181ef49af5ec62c423963cb07045228933309845b808ad4b3d61746a6e3117dac599b67926cb71230457aa7255", 0xe5, 0x8040, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xe33, 0x3, 0x9, 0x4, 0x80000001, 0xff}) socket(0x5, 0x5, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f00000001c0)=0x4) 03:31:44 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x2480) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x9) 03:31:44 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) read$usbfs(r0, &(0x7f0000000000)=""/54, 0x36) 03:31:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:44 executing program 5: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000000c0)={0x1}) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x9) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:31:45 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_vmscan_kswapd_sleep\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x13, 0x6, 0x1}, 0x10}, 0x78) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000380)=""/145) 03:31:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c4) 03:31:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf3, 0x2c800) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0xffffffffffffffff) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x5, 0x5]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) 03:31:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) semget(0x3, 0x3, 0x400) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000840) 03:31:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x2a842) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xfffffff8, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000800040408e38d00000000000000"]) 03:31:45 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) pkey_free(0xffffffffffffffff) 03:31:45 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xdb0f, 0x123000) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x32dfd052) 03:31:45 executing program 4: read$usbfs(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0xc0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001080)=0x4) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001100)=0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/hwrng\x00', 0x1ec03, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000000c0)=0x4) 03:31:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0143100e716fcb22922beb4d38968ea1849feef771352747018a8bcbf8ebbaaff1813ae77eb459a88992cb40960d05f117c1f5be7e3020eea5c4b670ab970dbe581e01a809b6821083c0b808580c66dd88d209c75b1240e3ba52008567ca4d824fb3c1ab5ff8e0d09690beea170649c6"]) 03:31:45 executing program 2: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/145) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:45 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x324800) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1000) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2480c3) 03:31:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x58642) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x420001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x9, 0x400100) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8001) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000100)=""/192, 0xc0, &(0x7f0000001e40)=""/4096, 0x2, 0x4}}, 0x48) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) 03:31:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x1c5e42) bind$rose(0xffffffffffffffff, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x442002, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) write$vhost_msg(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/230) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="6d69f67200000000"]) 03:31:45 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0x4e, 0x81, 0x0, 0xbb7}, 0x39, [0x7, 0x80000000, 0x101, 0xff, 0xfff, 0x468e, 0x5, 0x3ff, 0x0, 0xb3, 0x7, 0x6, 0x6, 0x7e7, 0xac0, 0x35, 0x1ff, 0x40, 0x4, 0xffffff81, 0x81, 0xd463, 0x3, 0x8001, 0x80, 0x0, 0x401, 0xd084, 0x6, 0x5, 0x1ff, 0x4, 0x8001, 0x101, 0x2fe0, 0x9, 0x7, 0x0, 0x4, 0x0, 0x7, 0x10000, 0xd2, 0x1000, 0x5, 0x42c4889e, 0x1, 0x7, 0x28, 0x2b, 0x5, 0x20, 0x3, 0x7, 0x4, 0x0, 0x2, 0x8, 0x3f, 0xffff8000, 0x8, 0x3ff, 0x1], [0x7, 0x9, 0x2, 0x9, 0x1f3d7a16, 0x9901, 0x0, 0x0, 0x5, 0x9, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x2, 0x3f, 0x4, 0x6, 0xf8, 0xd192, 0xc00, 0x5, 0xfff, 0x80000000, 0x80, 0x0, 0x10000, 0x1, 0x0, 0x800, 0x8, 0x401, 0xffffffff, 0x6, 0x6, 0x5, 0x5, 0x2, 0x8001, 0x80, 0x1000, 0x6, 0xffff, 0x0, 0x21, 0x3, 0x9, 0x6, 0x7, 0x1000, 0x1, 0x40, 0xfffeffff, 0x6, 0x1f, 0x8, 0x3, 0x8, 0x7, 0x3, 0x4, 0x4, 0x7], [0x401, 0x3f, 0x81, 0x40, 0x5, 0x6, 0x3f, 0x1, 0x7, 0x7, 0x7, 0x1, 0x1, 0x800, 0x8, 0x354a, 0xdf, 0x2, 0x0, 0x8, 0x4, 0x0, 0x2, 0x100000, 0x6, 0xdb, 0x101, 0xfff, 0x99, 0x40, 0xc98, 0x3c, 0x5, 0x10000, 0x9a, 0x6, 0x17, 0xff, 0x5, 0xc47, 0x400, 0x0, 0x9, 0x8000, 0xa7, 0x3, 0x2, 0x3, 0x2, 0x200, 0x1, 0x9c77, 0xffffffcb, 0x2, 0x2, 0x6, 0x1000, 0x4f6d, 0xfff, 0xfff, 0x3, 0x4ad, 0x0, 0xa5], [0xc85, 0x7fff, 0x6, 0x0, 0x4, 0x2, 0x7f, 0x1, 0xfffffffa, 0x1, 0x7e9, 0x813, 0x1ff, 0x3, 0x8, 0xbc64, 0x6, 0xfffffffe, 0xfffffffc, 0x7, 0x6, 0x630a5bec, 0x10001, 0x4, 0x8, 0x8, 0x4, 0x6, 0xa7, 0x101, 0xfa4, 0x3, 0x3ff, 0x6, 0x699, 0x7fffffff, 0x4, 0xffffffff, 0x8001, 0x1, 0x5, 0x4, 0x7, 0x50000, 0x100, 0x1, 0x31c8b1fd, 0xe10b, 0x0, 0x80000000, 0x80, 0x800, 0x7fffffff, 0x1, 0x7, 0x8000, 0x800, 0xc0b0, 0x80000, 0x4, 0x2, 0x4c, 0xffffffff]}, 0x45c) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3f7, 0x100, 0x70bd28, 0x25d7dbfc, {0x7, 0x0, './file0'}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000000) 03:31:45 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x4, [], r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0x9d400000, 0x1f}, 0x10, 0x1002d}, 0x78) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:45 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20c000, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000007, 0x2c542) 03:31:45 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20b03, 0x0) 03:31:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2ce803) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0x0, 0xfffffffffffffcf4}) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x40002) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x10001) 03:31:45 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x4, [], r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0x9d400000, 0x1f}, 0x10, 0x1002d}, 0x78) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:45 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 03:31:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:31:45 executing program 3: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x105300) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffe, 0x0) shmget(0x2, 0x1000, 0x12a0, &(0x7f0000ffe000/0x1000)=nil) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x200) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000100)=""/28) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)=0x7) 03:31:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40001) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000000c0)={0x1}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7331) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x20, 0x4) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0000a10000000000"]) 03:31:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x10000, 0x6}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:45 executing program 0: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x100000001, 0x804000) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40b03, 0x9c040) 03:31:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x2d0082) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0x6, "7ca5a46423c6773fcd83d98f657a6ef08e7017ba749791d0d54b81b63f7902039dcb3fdaead9fc295b67fc9b64b74fee6f48d246aa520a097d3b5013010fa8256a11d62d2303f5bf04fe84acadfb845885872c3f62d19dcdf5ae4962204456f7f99754b3ca948ace04c05fe2d2ca5b859a1d15b6f600a2a97d84c579f3fab009d9d42f676da3a8a8a2047bb4d63fa545922b731b10bcbd7e039b64b4642d19c07d07bfd5dc3880ae07d487423db2854a4a061afb482139839f44ac73b464e992d35e5b6f0a986bfa7024e5ebd365215a2a19c7b52752dbfb8c796f166588585da29462614b7e6c8179523c4b0d2cdcfa3e791c533cda8c33e82f805413b468d0"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000200)=0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000240)={{{0xd, 0x1}}, 0x30, 0x3, &(0x7f0000000280)="2126aac15d15f0faf6be03cc9e5b4d4d56783988621fd67e1eb3e37b430053e312eaa7bdbc1a6f5bb8c0068d6d9abef2"}) ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000f10000"]) 03:31:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x8a302) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:45 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='free_extent_state\x00', r0}, 0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1400000000003b) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:45 executing program 0: pkey_alloc(0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:45 executing program 1: ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x400080) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000000c0)=0x7) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="fe0000000000000010d0787a80e6389d92c292728fefc8195cbb7e0e14aecb49df6e4a8e20"]) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0xc, 0x2, 0x5b7, 0xf0, 0x3, &(0x7f00000000c0)="27fedf3b7689083de31efada0de29bf48a2c465232deb7daa2d95933d3d36580f4fc4f9f7132d35b4fbc0cb67952cc3f510ebdac778d58a210b2913530621eb0b3a5a59718333596357fce021a2ba6904491b9fdc555683acf3be5d64db86e738afff837aed0156fe460f7ce9611dde48778e8064653b7bef9c0bb05ceb64c643e93e16049c8383e59875b7af53b41857f98bf6d4a249d598e524558fa7c37f7058f08d09e9d8f4c8f77a0347db188a224874ca136c9a216f7089a0fffd0d0ca7aafad0d4a406b187f0d955095188657bb2db38d1422fc981fad30fe3aa1df80f918a297cc3a651c162d3c1beecbce95"}) 03:31:45 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb, 0x535980) 03:31:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) socket$nl_audit(0x10, 0x3, 0x9) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/20, 0x14) 03:31:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb634, 0x6000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={0x0, 0x1, 0x10001}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x4, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000000c0)={0x9, 0x9}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x9, 0x2}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xa) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x208000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000180)=0x1f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x80) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfffffffffffffff8) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:31:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) read$usbfs(r0, &(0x7f00000002c0)=""/185, 0xb9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000001c0)=""/157, &(0x7f0000000280)=0x9d) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) 03:31:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f00000001c0)=ANY=[@ANYBLOB="cd9b0a00000000002fdb58dab401b435206d3210bfc1f36635517869d87ed566f8465068e709000000a0237145f9bca5733014783f08087c6b1d715a26a088fc20f026183d8a1d5aaf91ed5d40e5c4246f81e15416824df7f33b00d457554abcf91f4a9c3a9d264bc8acdb895175f3a8507c38221ca24f9d1db58f2ba7703519cfae8a5b0e2a22b12c515dfb07ffbb65edfeed8166a8085695d25d21d4367f2bb49ce4e86687f7093fbdbff16d2c6f7463dfc5"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spmi_read_end\x00'}, 0x10) 03:31:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="b6100000060000008abbff858086"]) 03:31:45 executing program 2: ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x400080) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000000c0)=0x7) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="fe0000000000000010d0787a80e6389d92c292728fefc8195cbb7e0e14aecb49df6e4a8e20"]) 03:31:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001e40)=""/4096, 0x1000) write$vhost_msg(r1, 0x0, 0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x100, 0x208003) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000200)={0x0, 0x32, 0x40, 0x80, 0xd, 0x3, &(0x7f00000001c0)="7e1b65a1aa523e2f61cea4cc02"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) bind$rose(r1, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @null, @default]}, 0x40) ioctl$CHAR_RAW_RAGET(r3, 0x1263, &(0x7f0000000140)) write$evdev(r3, &(0x7f00000000c0)=[{{}, 0x12, 0x4, 0x4}, {{}, 0x16, 0x7, 0x8}, {{0x0, 0xea60}, 0x12, 0x0, 0x4}, {{0x0, 0x2710}, 0x3, 0x5, 0x7}], 0x60) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000080)={0x5, 0x1}) 03:31:46 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x288043) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)={0x2, 0x3f}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)={0xcc9c}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/125) 03:31:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) 03:31:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0x101, "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"}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x53) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0x8f01}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x5, 0x1}}, 0xbb, 0xffff7803, &(0x7f00000000c0)="26056bd28e8b72d8a338c918db0b5231b5b45206e13a5adbceafc0aa28425a5745d2fe684121dfa319dbf7dff9628ddfbf34166f9fe5f8cf59a4b76fc7eac9660051042bc6d187e3ba3b6b01dc1798a00c9d59b7af33072ef6edcbe32a5f451b39a6802a3e372db855152e573c043812b1dca536ef5b8c22b935e6b812d079e3e0c738014af96f1a2232576ebc531e7736e8d54d4c6012fe32b26f52631a0011ff085675edcfbe4be158b564e012c93a5443147c49b46b4021b4aa"}) 03:31:46 executing program 2: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000002c0)=""/54) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0xc000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/6) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @default, @bpq0='bpq0\x00', 0x0, [@bcast, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1f) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r6, 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r6, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/592]) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000001c0)=""/107) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x4403) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x5, 0x1a, 0x0, 0x6d46, 0x1, 0x9, &(0x7f00000000c0)=';'}) 03:31:46 executing program 0: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x9, &(0x7f0000000000)="eb022c0d07c116adf49b0eec1343d7e97af1985a6e878983b6916a5766673d2415a733849c754e2ed89271f0f05ac51e9219c16e5ea25b2be13f929417159286b9e839760e42efd1cc1a5b8654cf22a14896180d9fc25e17a9311a5df1035244b29d1c51ed8a253090dd256e3c6e0dffc0a55d7403"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x280941) 03:31:46 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa3e1, 0xa000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x5c4e0649f3d8ccfe, 0x9119bd5846625074, 0x0, 0x0, 0x0, 0x8, 0x0}) 03:31:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:46 executing program 2: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000002c0)=""/54) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0xc000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/6) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @default, @bpq0='bpq0\x00', 0x0, [@bcast, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1f) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r6, 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r6, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/592]) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000001c0)=""/107) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x111002) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE64(r0, 0x80081272, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2600, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) socket(0x2, 0x801, 0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000041) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) accept4$rose(r2, &(0x7f0000000100)=@short={0xb, @remote, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x19, 0x4, 0x1, 0xfd, 0x2, &(0x7f00000000c0)="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"}) 03:31:46 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8080, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x400, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4048084) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:46 executing program 2: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000002c0)=""/54) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0xc000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/6) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @default, @bpq0='bpq0\x00', 0x0, [@bcast, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1f) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r6, 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r6, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/592]) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000001c0)=""/107) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x40001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x40000, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r0, 0x1264, &(0x7f0000000000)=0x40000000000) 03:31:46 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1b, 0x4, 0x7b, 0x6}, {0x4, 0x4e, 0x3, 0x400}, {0xffc1, 0x9, 0x7f}, {0x0, 0x80, 0x8, 0x400}, {0x48, 0x0, 0xfb, 0x2}, {0xfff8, 0x20, 0x80, 0x4}, {0x6, 0x2, 0x56, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r1, 0x1, r2, 0x5, 0x80000}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:46 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) 03:31:46 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) 03:31:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2a, 0x0) 03:31:46 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$char_raw(&(0x7f0000000140)='/dev/raw/raw#\x00', 0x0, 0x193000) ioctl$CHAR_RAW_PG(r0, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0xbb, &(0x7f0000000180)="011718817a6ab8ed237892ef7747e26c4d334d08d1a2832297240ca30b6b9896f57e17e97f12ccd05631a37e574cd2f70ca1f3fd175859d2d79edf2882fa07b0260d8f6a283f7e1ae1f6eff395fc4e9eac9a0d584b9da95106462b524bf44290b3bb78c7f746347116c2326efc083b0ba225dffc08fd66cffccec390ba849c2958ae0bb744d99057fa2f3c82f1cbd2c54f14614f44566fdca725332854ee16694627726557cd055371a3fee79097f191e7596646fe84da5c1b7b53"}) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008550e, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000006b4cbdeed2900f3c249872a500007ec430038f286c2bca69aa1f0020005e63c88d4890cca835996b"]) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xe2d3d6e8051dc6fa}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x54) read$usbfs(r0, &(0x7f00000000c0)=""/131, 0x83) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0xc}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 03:31:46 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x17, 0xfffe, 0x0, 0x0, 0x0, 0x0}) 03:31:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x4) 03:31:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1b, 0x4, 0x7b, 0x6}, {0x4, 0x4e, 0x3, 0x400}, {0xffc1, 0x9, 0x7f}, {0x0, 0x80, 0x8, 0x400}, {0x48, 0x0, 0xfb, 0x2}, {0xfff8, 0x20, 0x80, 0x4}, {0x6, 0x2, 0x56, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r1, 0x1, r2, 0x5, 0x80000}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="369e55ccc8a8e5d537e0e8e85ea16f3c054dd13aadbcedb76cc135f16568b2704348689c00ace039646c5810d24717bc8cf7ceabcf73fbde5240adfb30a65c559e784aa16167128d8c5873ef04cf9db3f857831faefed6dddcbf93796f88520325a84114eb03486a868998e4acea6d95489ea535c51c66ed234bd0bacc35c0f2cd2f42cb2d8f819062a86102aa529cc55ca8a15f6c156ef0a532be14899ffbbc2b6754a6a2c590d81de81c4477791cc2cb282368d86f69e53b821d1fbe8a2c9af7091df53813"]) 03:31:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0080000020000000"]) 03:31:46 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8101) 03:31:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0)='gtp\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ba8fac8d077a"}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x48080) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="dd27d6f4a28040bee312d8b8a54f10928ecfb6edfbb7f6fee3f22a71cecf17dba6aad4dd86c21e46bdfd66f175952c3e2bfd403643382e292bb79aec9a6b0e819cd4c85e75d3a1c09066548d20c951d6162af59e8fa352587b90630a07f702e52a6bab682edbbb08d608388a0d975a61ad06f9ed1f756b27076f3a39f3e1e199ec145d6f75a5d4e868317d0375d9a819579dae93d5a554b2d25761410ff06973d411c049502790328dad016899566f59b7ec79f7b2295d52a77a9af73dafcd4b4ded1ab87fa61ed246513b096fd2c7bc2614cf94456eca8b88e09d21ae3b662633fa6b846399c8dc5ba3edc0d970", @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000"], 0x14}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x333280, 0x0) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000500)=""/114) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\b\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000030000000c00000008003200e4000000060028000200000005003300f7000000390001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40051) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x280a81) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x200) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000700)=0x5) read$usbfs(r8, &(0x7f0000000780)=""/24, 0xffffffffffffff79) 03:31:46 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x214100) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r1, 0x127a, &(0x7f00000001c0)) write$vhost_msg(r0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd24, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x64880}, 0x4000) pkey_mprotect(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1000000, 0xffffffffffffffff) 03:31:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x230, 0x4000) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10080000001, 0x4c6640) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$vhost_msg(r1, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x800) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x80000000) 03:31:46 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:31:46 executing program 0: ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x8f6a) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x2) 03:31:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xff) 03:31:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x300, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x48c1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:46 executing program 3: r0 = socket(0xa, 0x3, 0x2) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x40) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80200, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) 03:31:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0xfff) 03:31:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0xa, 0x1}) 03:31:47 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x2040) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x341000, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x80) 03:31:47 executing program 1: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0xf5, 0x3}) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) 03:31:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = socket(0x2, 0x800, 0xff) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:47 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x2000) 03:31:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x127003, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000060a00000000000072b700001839000003000000000000000000000018210000", @ANYRES32=r2, @ANYBLOB="00eb1a150900ffffff0300042e98b5429f59b6c6"], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0x94, &(0x7f0000000100)=""/148, 0x40f00, 0x8, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0xda, 0x5}, 0x10}, 0x78) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0xfffff000) 03:31:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESET(r0, 0x5514) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) read$usbfs(r0, &(0x7f0000000040)=""/40, 0x28) 03:31:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 03:31:47 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) 03:31:47 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x9, 0x401}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x422040, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000000c0)=""/64) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x10001, 0x80}) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/217) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000100)={0xf}) 03:31:47 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x1153c2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080), 0x0, 0x40000001, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) sendto$rose(r0, &(0x7f0000001180)="99755b1371626a6cb6699f0adeb1ee7bb0c0931632774edc1ed0a9d3ef8c9fde4e21dc6b4964beb9a29fdee7f495fc3a91761d71a424e8256b5d7e5ed417d9b4f9ca250bd3e9a4d0f4d8ef2717af8be1dba55aaf30bdc022c87c34f91f8023af60af5e4bcdce809a2a51035f72fb2e6437bfce191affabdb73", 0x79, 0x0, &(0x7f0000001200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xff) r1 = syz_open_dev$char_raw(&(0x7f0000001100)='/dev/raw/raw#\x00', 0x0, 0xb456da534faa9332) r2 = syz_open_dev$usbfs(&(0x7f0000001240)='/dev/bus/usb/00#/00#\x00', 0x9c, 0x60100) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000001140)=0xc8) 03:31:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x46200, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x5, 0x1}}, 0xf2, 0x4, &(0x7f0000000080)="aa41cc2a611ca450d8daf85076ec67baa03b6c7a2d3750d13478d501cc4e13e7654ead7b082df01c8d96ef9f565c7431e9719b1d9bc4cd0113a48768bc775c718ce94a7031e07e81411945a5585b19043205c952d618ad389b0824e4c258411d2c9410ee7ad4f790d2791e3bebb5f04b2df7b1681850448803031f0f5770283648e724c9e3f365ee0fbfe0373d560562099d26c1af92a27a1c07015340a39d1f4c3c16b6605b58a33871ee2479123a21b0b8a6c86f3c6ab30e25efca2cb9915fcb4187e40db3256e3cd0d101a5fce0af43b030ec645fe3c4ead618601607e235b41437b5e75cbb3e9ddba73560fe3ab26d6a"}) 03:31:47 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008550e, &(0x7f0000000040)=ANY=[]) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) 03:31:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0xc0003) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000df658de8aeb082708cfd654b4a620678aa86b92813cde9c90ae0e951a8de823c58c2ffa36fb05b"]) 03:31:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x190, 0x301940) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x8001) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x9a300) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000082e2a53008098a0b"]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x501201, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000180)={0x4, "2629b7bb92916330469e40690f3eb0c782d88fd61972d2095cb261ad09d2a02fc01a41978adce2c98c74fbb1c6b70fe6fcc07317743df350f4d12270c5a3028d2de3432a9756a9c1491c2548a8f3b60f59b4921c2804e93dba091ca377ffed28d7b6e4cefe5b785b8656cb17d00e1c3ffaf82f83fc25feae5269ce55a83431c4628bed303db25e5439871bc59ca7f0ca00f6b4ff944b53de421af056bb66506ad6151f007de837fca320ed29529c3f109d44a766816a0f66aa0405b26a48fabcf25668edc53fa74087f134f370925baca4772922471cfc9846c186ca65b5872f5359413f1dd1be471c121f0452892021132c79b2ffaac4ece70887014fafe9d5"}) 03:31:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)={0x0, 0xfd58}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x80) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000000c0)) 03:31:47 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={0x0, 0x9, 0x401}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x422040, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000000c0)=""/64) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x10001, 0x80}) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/217) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000100)={0xf}) 03:31:47 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000280)=""/64, &(0x7f0000000080)=0x40) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000100)=0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000088e2b27fe0f36b0c3e931d9fb95f71d3f0b89e757453cb117c1671c542b09ba972b7e7c58a18f23b29dc12df3c5b910641f8a28e574d2a4216f6f80f62d60c7996dd2aebdd930c9d2793fcd97ff01efbdc3cbdccb49de649b2010cf7b03b7c6475843bae5fcf404e0a82a915dfa0d7826e9f5763b1", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250700000008002c009bb9000008000b000400000008003c0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x44805) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 03:31:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:47 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x3, 0xff81, 0xff, 0x9bf1}, 'syz0\x00', 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4600, 0x0) 03:31:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x7, 0x4, 0x84000000, 0x4000}) 03:31:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x7) pkey_alloc(0x0, 0x0) 03:31:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="00e7000000000000"]) 03:31:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000040)={0x7, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x610000, 0x0) 03:31:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x111000, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2, 0x2]) write$vhost_msg(r1, 0x0, 0x0) connect$rose(r1, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @null, @default]}, 0x40) 03:31:47 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10402) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000001100)={0x3, &(0x7f0000000100)="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"}) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x4, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbea0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000012c0)={0x2, 0x7f, 0x7, 0xe5, 0x1, 0x1000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001180)='/dev/kvm\x00', 0x80900, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1c) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/50, &(0x7f0000000040)=0x32) 03:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x2}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x15, 0x91, &(0x7f00000000c0)="29e91e8881ab6341a9f367824311601152746ea04dc3614e81623c17db18fe23c0f5643c25f9e2415d2cb2d0123ebadc87ad55b680cbed95ea3d766082b6634da4b7300ee2e36fd5ce086c9a9881b6901ae1720d75431d95c5a4b3d4eedc3d9b7fafa5fef6eeba9f4595f780656169999bb771e4142e322c1bab560a864f0ff8ae8eef37f013dc446089fe6fcf305ac225"}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="4766e46500010000"]) 03:31:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:47 executing program 4: ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xaac0, 0x88042) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:47 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:31:47 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaa82, 0x200000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x18000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:47 executing program 1: ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) 03:31:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac1, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() 03:31:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x10}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x400000040b03, 0x422100) 03:31:47 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:47 executing program 5: ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008550e, &(0x7f0000000080)={0xd286, 0xd, [{0xe}, {0x6}, {0xf}, {0x6, 0x1}, {0x6}, {0x1}, {0x1, 0x1}, {0xd, 0x1}, {0x8, 0x1}, {0x9}, {0x5, 0x1}, {0x9}, {0x9, 0x1}]}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x30) r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x81800) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000000c0)=@netrom) 03:31:47 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x600020, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg(r1, 0x0, 0xfffffffffffffe73) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000240)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000200)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r3, 0x40, 0x2}) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x13, 0x1, 0x3, 0x17, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_sec_ctx={0xb, 0x18, 0x3, 0xc1, 0x4f, "c31f4fb41697c645f5d6f1831c224686e5bdae0355a6a93a012d4dcd1a96c21d7a58d801bac22cb864cd443ec4b0f52febf64cc5baab9f07613181c05245e21d8d245063ec31dc124e96b595c7a88a"}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bb0, 0x1000, {0x6, 0xff, 0x4, 0x3, 0x0, 0x8, 0x0, @in=@multicast1, @in6=@private1={0xfc, 0x1, [], 0x1}}}, @sadb_ident={0x2, 0xb, 0xff7f, 0x0, 0x7}]}, 0xb8}}, 0x40004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000080)={0x9, 0xab}) 03:31:48 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000001c0)={0x5, 0x1}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000200)=""/115, 0x73, 0x2180, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000040)={0x0, "2faa88b0d58c3231ff907cd9c6b8227ea0d92154c7d8b4f2200057f722dba1e01b11d6c6fb012e6ba941523951ac25360902a06eb71e5487de56ae492da6efe36ee69224e7606048181e813a21ffb2d65f961a6188c9765246b6a365d4c64fcb7062d26fc91433f896e96be0440d8e043339194c27cd1a3ed3548d2886c97db3f84df47ab080781d77ddcfcd9def9faf092e8766165f2ff9212c730b334c80d4008fd1c64bf4329ea9a763fec636b7e6d23ac7af8e4958723dcb4992a30e6786515de5e01d2b0be3948bd15790f17b28e981783cb8fd764bc6323f9e1aca787f57ef554d43ff7ab492ae20d11d7a11dc66cb4caa78799a5d879a419a2c1a2fc6"}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000180)=0x90000000) 03:31:48 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xb59000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00', {0x0, 0x64f, 0x7ff, 0x1}, 0x40, [0x1f, 0x39, 0x52, 0x9, 0x1, 0x2, 0x6, 0x9, 0x178, 0xd95, 0x81, 0x3f, 0x36, 0x3, 0x401, 0x0, 0x7, 0x401, 0x7, 0xf8000000, 0x7, 0x84a3a90a, 0x3, 0x9, 0x76c, 0x7fff, 0x4eb, 0x7, 0x401, 0x81, 0x8, 0x5, 0xfffffffa, 0x5, 0x9, 0x3, 0xffffffff, 0x3f000000, 0x1, 0x6, 0x1, 0x8001, 0x5, 0x1, 0x7, 0x8, 0x6, 0x400, 0x80000001, 0x1, 0x9, 0xfffffffb, 0xffff1756, 0x7, 0xa90, 0x800, 0xffffffff, 0x1000, 0x8, 0xff, 0x5, 0x5, 0x4, 0x678], [0x4, 0x80, 0x853, 0x6, 0x3, 0x1, 0x8001, 0x2f5e, 0x0, 0x0, 0x3f, 0x100, 0x20, 0xfffffff9, 0xfffffffe, 0x8, 0xfffffffb, 0x6e, 0x8, 0x5, 0x6, 0xdf69, 0x10000, 0x800, 0x0, 0x8, 0x6e2, 0x10001, 0x2c2e, 0x3, 0xfffffffd, 0x5, 0x7, 0xfeb, 0xfff, 0xffffffe0, 0x6, 0x3, 0x7fffffff, 0x1, 0x1, 0x7, 0x7, 0x81, 0x3, 0x200, 0x95, 0x101, 0x0, 0x10000, 0x7fffffff, 0x9, 0xfffffff9, 0x4, 0xa9, 0x308, 0x0, 0x99, 0x3, 0xffffffff, 0x5, 0xe5, 0x9, 0x800], [0x0, 0x7d8b85a, 0x9, 0x3, 0x1ff, 0x8, 0x1, 0x8, 0x1000, 0xff, 0xfffffffa, 0x8, 0x0, 0x0, 0x2, 0x4, 0x6, 0x0, 0x9, 0x4b, 0x5, 0xa6, 0x40, 0x0, 0x6, 0x1, 0xfffffff7, 0xdd6, 0xfffffffb, 0x100, 0x20, 0x81, 0xffffff81, 0x4, 0x0, 0x9, 0x100, 0x10001, 0x81, 0x8b4, 0x1ff, 0x401, 0x2, 0x81, 0x9, 0x7, 0x9, 0xb9be, 0xd2c, 0x81, 0x6, 0x6979, 0x80000001, 0x4, 0x1, 0x26, 0x1000, 0x2, 0x2, 0x3f, 0x7f, 0x4, 0x8, 0xd54], [0x3f, 0x7c31, 0x3, 0x8001, 0x400, 0x7, 0x89, 0x3, 0x4, 0xfffffffd, 0xb5, 0x80000001, 0x7fff, 0x80000000, 0x40, 0x0, 0x6, 0x1e8, 0x3, 0x0, 0x9, 0x6, 0x7fffffff, 0x4, 0x8000, 0x7fff, 0x2, 0x46f3883d, 0x0, 0x1, 0x166000, 0x0, 0xfffffc01, 0x5, 0xa46e, 0x7ff, 0x4, 0x7, 0x6, 0x1ff, 0x5, 0x6, 0x7, 0x59, 0xe65, 0x5c1, 0x1f, 0xf56, 0x3, 0x7f, 0x45c8329d, 0x348b, 0x0, 0xff, 0x100, 0x200, 0x20, 0x4, 0x8, 0x8, 0x101, 0x1, 0x9, 0x8]}, 0x45c) r1 = socket(0xa, 0x3, 0x4) connect$bt_sco(r1, &(0x7f0000000040), 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7, 0x5, 0xff, 0x31, 0x7, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x459, 0x0) 03:31:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x40, 0xf, 0xfff, 0x1000, 0x2e, 0x2, &(0x7f0000000040)="e47e37e9b47f056e06a4d1489b60484a474eca7bbf6b039197b7d40d5e2caceb0872c11295077784d41c7a048561"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 03:31:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0xffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x1a9442) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x6, 0x6}) 03:31:48 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x800) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)=0x6) read$usbfs(r0, &(0x7f0000000040)=""/51, 0x33) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000bff0a02600000000"]) 03:31:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/5) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x418780) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x8}) 03:31:48 executing program 3: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000000c0)={0x10000, 0x2, "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"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x10000ab, 0xa580) 03:31:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x240004d0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x4000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x28000, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000280)={0x9, 0x3, 0x20}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008550e, &(0x7f0000000100)={0x0, 0x1c, [{0xe}, {0xc}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0xe}, {0xc}, {0xb, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0xe}, {0x4, 0x1}, {0x8, 0x1}, {0xb}, {0x7, 0x1}, {}, {0x3}, {0xe}, {0x7, 0x1}, {0x9, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x2, 0x1}, {0x8, 0x1}, {0xe, 0x1}]}) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0xf829, 0xf, [{0xc, 0x1}, {0xe, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0xa}, {0xa}, {0xf, 0x1}, {0xe}, {0x9, 0x1}, {0x9}, {0x6, 0x1}, {0x5}, {}, {0xa}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) 03:31:48 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x42ec0) 03:31:48 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0xfe) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_DEV_DESTROY(r1, 0x5502) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000200)={0x2, r1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x8, 0x7, 0x101, 0x80e, r1, 0x5, [], 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xf, 0x400, 0x1, 0x0, 0x102, r4, 0x2, [], 0x0, r0, 0x0, 0x0, 0x5}, 0x40) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) socket(0x21, 0x1, 0x1ff) write$vhost_msg(r7, 0x0, 0x0) write$vhost_msg(r7, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000180)=0x8d4a) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r5}) 03:31:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x10000ab, 0xa580) 03:31:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)) waitid(0x2, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, &(0x7f0000000140)) 03:31:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xb}}, 0x49, 0x9, &(0x7f0000000000)="1ab234b1eabd975de271cbf94986c0e0addcd0b9ec34aee62872048c904a435b685d542afef63b7991c50c164bec234a385f92a609723e1dc71b3331f1ba8d0c938e245e940045142c"}) pkey_alloc(0x0, 0x1) 03:31:48 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0xe, 0x0, 0x4, 0x33, 0x4, &(0x7f0000000040)="c05de6f3fcaba1aa85611573fdb61d5363b01c48afb4ad45f56fe19cf0ad275017a816e4e02f379c8807fc58b26aa46adbcaba"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:48 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x240004d0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x4000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x28000, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000280)={0x9, 0x3, 0x20}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008550e, &(0x7f0000000100)={0x0, 0x1c, [{0xe}, {0xc}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0xe}, {0xc}, {0xb, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0xe}, {0x4, 0x1}, {0x8, 0x1}, {0xb}, {0x7, 0x1}, {}, {0x3}, {0xe}, {0x7, 0x1}, {0x9, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x2, 0x1}, {0x8, 0x1}, {0xe, 0x1}]}) 03:31:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x4, 0x7b, 0x1, 0x960, 0xffffffffffffffff, 0x80000000, [], 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x7, 0xb9e5, 0x2, 0x100800, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x8, 0x8000, 0x80, 0x450, r0, 0x33, [], r1, 0xffffffffffffffff, 0x5, 0x3}, 0x40) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x3, 0x1, 0xffffffc1}) 03:31:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x606e00) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000080)={0xd, 0x1}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x1f, 0x0, 0xff81, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x41000, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)=0x7) ioctl$USBDEVFS_RESET(r1, 0x5514) socket$inet_dccp(0x2, 0x6, 0x0) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x10001) 03:31:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:48 executing program 3: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x6, 0x5, 0x0, 0xfe, 0x5, 0xfffffffc}) 03:31:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 4: ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x18) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1198}}, 0x881) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0xc}}, 0x19c, 0x5, &(0x7f0000000340)="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"}) socket$key(0xf, 0x3, 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x58b601, 0x0) 03:31:48 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x119000, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000040)) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) 03:31:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x1, 0x10800) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000480)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x260242, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/154, 0x9a, &(0x7f0000000180)=""/113, 0x1, 0x4}}, 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7fff, 0x109840) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x7c000000, 0x58801) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000380)={0x7ff, 0x5, 0x1ff, 0x1, 0x17, 0xcf8d}) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000003c0)=""/84) getsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/114) 03:31:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 4: ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x3) 03:31:49 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80400) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffffffffffff1172, 0x40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r1, r2/1000+60000}, 0x11, 0x21, 0x8000}, {{0x77359400}, 0x1, 0x5, 0x5}, {{r3, r4/1000+60000}, 0x17, 0x40, 0xe7}, {{r5, r6/1000+60000}, 0x14, 0x20, 0x40}], 0x60) 03:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:49 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:49 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = socket(0x22, 0x5, 0x3) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8840) syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x728, "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"}) 03:31:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88442) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 03:31:49 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:49 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x480901) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x262001) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000080)=0x1f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x5, 0xe, 0x0, 0x8000, 0x0, 0x0, 0x0}) 03:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x82) 03:31:49 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 4: ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:49 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:49 executing program 4: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0x10001, @broadcast}) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0xb) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x40000) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000100)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="000003000000005e"]) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:31:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000100)={0x5, &(0x7f0000000040)="9df277c7700cf7ef48859b3b3f9a0b439eec4839ae17832011efba0bc5aabc078f69aad528f75b9193ac617f8313c4aedcdbaf35d3098db557533e1f7933ddceffc4cb0f37c302d38ab46efb1972f1980685300159841604438905fa7322ce1bac82ea6ebbe3ea88cabbda5b50782dd4fc1eaea3f562e13b24dd711c666c63d829b7251b17e1403c8a18ae2b34252f8b9c44a049203d3728af8bf5519a32f840e3"}) 03:31:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0xc480, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000001c0)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0xc, 0x1}}, 0x8f, 0xffffff01, &(0x7f0000000100)="ffd55add64007f756cd4a87e4382ac02aa865cba2cea9c00092ef6138769c6600ed05c4501665f1cdc6698e642483d55364c0e88792bb5d4f4d1e3fa9d704648a6157a689291bc904af4028056d9de538f6927fe123344d423fae8a693938324c21ac0dd0e97b354dae9f5086634b27d67bc41ed6312eebc5c6d6c348758163e9c72269db6c75e7ba85703865076a3"}) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="f7fa000014007b40b5693685779207050d818909020e83080487020eaf88954644cb1e7c4d47d6d9642cf9b13c354db89d7bcc0e5649a62c9514895f6be074cc2d7c2813e1aba9c04a53f40fe5cef6ace96cf7aed647b4aa57dd9b81e8cfd12b7fce481c1c"]) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x6502) 03:31:50 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:50 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz0\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r3, &(0x7f00000000c0)={{}, 0x16, 0x4, 0x90a7}, 0x18) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000000c0)={0x1000, 0x2, "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"}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x400000) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 2: ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) 03:31:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa, 0x268c00) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1fe) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000040)=0x8000, 0x4) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x8}) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x42, &(0x7f0000000040)="295853c163b9890dd36ad070d16199dbfa2854b20554869287724ed0621f60ebdd7f68684d50d72afa607849cfc79fa2ff4eabfdf5ca52f6b340da293ecec1a75f6b"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x1) 03:31:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendto$rose(r0, &(0x7f00000000c0)="670b6616bb21dfc872a2b75999a2ab6e53137a13bbf2fe5be5e029684b7018634ddd6a60353116a99b6a9b5f68f571dee1902db4ca81122f3b2f30c9cabedc36d393048a5fc87137605a3ee966010ae378f50bde35e5a3f4646ca919cf8370bbadbde3dab6d8a738935bc961c9e59b8cb8b46beb717c89802dd2d59fabda1089b457dc", 0x83, 0x4000, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xa, 0x9, 0x8001}) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 4: write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="674466980000000001000400040000003938bf4450d681dc36f8fa4a4644cfb4d64552ae0d7966bdaf1549ef9a9c986bdacb693cf2f9f99b690d86ec189f1efd9d2445442e6912b56e8e6405267ba2fd06a46794db3032cf5fbffc7715663a38a744216d06b3ab5760c812b6162358a72815a88f2fd52c0525337c8ac10b0946398dd884c57d19addcc58001abd0e79b8f683883b64f6c799948ea94e6828bd890210f2b185872545ce8efc58bdb0594d150e5da1efc99df70a43679a0cbc58d44a8fff5acb18b791a5dd253abbff5ee2aee86b964522814dc2acbbd9369dc70eee7fd105cc9e31985147072b4ca403429c9fd914f79a98c44b83dd7bcfbff56d211bbeb342fc4d70d4b4f5c187b32c8c2e4d4e7b9333eeacabc7523b395c125b3593753dcb5ee1f898521085dc46abf014cee7237675bf46b8cee76e66c3b90813f1312c2f2d0d9ff6d707ee53336a57b3a3906f8eb07af10e6a84da049a9d11bb0d3e7342c015fac5fa153eecc8a6d67bf988cd372b571e7287fde40e9c1cf7af7bd210c9d6f39d90e4cfbcd4d68a530b6ccdd222a4088411f137dee280f45e707e0c20b5e9fc913"], 0xbe) semget(0x0, 0x4, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x84000) semget(0x2, 0x2, 0x168) semget(0x2, 0x3, 0x116) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendto$rose(r0, &(0x7f00000000c0)="670b6616bb21dfc872a2b75999a2ab6e53137a13bbf2fe5be5e029684b7018634ddd6a60353116a99b6a9b5f68f571dee1902db4ca81122f3b2f30c9cabedc36d393048a5fc87137605a3ee966010ae378f50bde35e5a3f4646ca919cf8370bbadbde3dab6d8a738935bc961c9e59b8cb8b46beb717c89802dd2d59fabda1089b457dc", 0x83, 0x4000, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xa, 0x9, 0x8001}) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:50 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2138.689701] hub 4-0:1.0: USB hub found [ 2138.709187] hub 4-0:1.0: 1 port detected 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendto$rose(r0, &(0x7f00000000c0)="670b6616bb21dfc872a2b75999a2ab6e53137a13bbf2fe5be5e029684b7018634ddd6a60353116a99b6a9b5f68f571dee1902db4ca81122f3b2f30c9cabedc36d393048a5fc87137605a3ee966010ae378f50bde35e5a3f4646ca919cf8370bbadbde3dab6d8a738935bc961c9e59b8cb8b46beb717c89802dd2d59fabda1089b457dc", 0x83, 0x4000, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xa, 0x9, 0x8001}) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7) 03:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 2138.759816] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #1 03:31:50 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x40) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x100) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:50 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 03:31:51 executing program 3: write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xbe) semget(0x0, 0x4, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x84000) semget(0x2, 0x2, 0x168) semget(0x2, 0x3, 0x116) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) 03:31:51 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:51 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8, 0x4, 0x4, 0x2}]}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000200)=0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000240)=0x8000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000001c0)={0x42b, &(0x7f00000000c0)="f00ec71ed2cd548cc82786b067461f991d16e244af8e7be1cdbb53a435ff5da7cba537ed5834db32b66d10a715e202beca9723f307dea651b183610d0412a0464d9f6e5ed4358899fb28dcd3a78e751d551eefe5d5278f4e2ed13449939a48580992cd9ec43c7ae7c71c5a8bc5819a9210b3b79beb86bae9edb3571b817e42a14895d7e1c6fc4a1aea21360e29e08b4f371c14751ee4fe690b1d6c0e2ae6be2ec2cf020ea9fba87dc363133b95f0d108a18b7a7dba10231e3caac4cfa2f6e2c4dfdc00996ca4e098aa59fbea6b4d9d4fa50e1f0d9a1bb27114912540f34ef9b7cbf9cef850df4080d08a7a799a4bcc9a4fc1"}) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000280)) [ 2138.982562] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #1 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 03:31:51 executing program 3: write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xbe) semget(0x0, 0x4, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x84000) semget(0x2, 0x2, 0x168) semget(0x2, 0x3, 0x116) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) 03:31:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:51 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x0, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x29, &(0x7f0000000040)}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000100)=""/70) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$CHAR_RAW_GETSIZE64(r2, 0x80081272, &(0x7f0000000040)) [ 2139.135203] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #1 03:31:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:51 executing program 3: write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xbe) semget(0x0, 0x4, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x84000) semget(0x2, 0x2, 0x168) semget(0x2, 0x3, 0x116) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) 03:31:51 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x0, 0x0, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getuid() 03:31:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2139.311372] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #1 03:31:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:51 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8, 0x4, 0x4, 0x2}]}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000200)=0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000240)=0x8000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000001c0)={0x42b, &(0x7f00000000c0)="f00ec71ed2cd548cc82786b067461f991d16e244af8e7be1cdbb53a435ff5da7cba537ed5834db32b66d10a715e202beca9723f307dea651b183610d0412a0464d9f6e5ed4358899fb28dcd3a78e751d551eefe5d5278f4e2ed13449939a48580992cd9ec43c7ae7c71c5a8bc5819a9210b3b79beb86bae9edb3571b817e42a14895d7e1c6fc4a1aea21360e29e08b4f371c14751ee4fe690b1d6c0e2ae6be2ec2cf020ea9fba87dc363133b95f0d108a18b7a7dba10231e3caac4cfa2f6e2c4dfdc00996ca4e098aa59fbea6b4d9d4fa50e1f0d9a1bb27114912540f34ef9b7cbf9cef850df4080d08a7a799a4bcc9a4fc1"}) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000280)) 03:31:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x0, 0x0, 0x0, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400400, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, &(0x7f0000000140)={0x7, 0x0, 0xa1, &(0x7f0000000080)="66d84c21959afcb17cc056e9fcbcceadb60a36d80e48f29f308386d4b1769a88aaf431679739dee5ac1066e4ed472fece06554b1e1f42a18eb6386344a490c853a302703bc93b1ded17df0f44b242f3f089acf209bc6a179df7a84f25d4a4c019850b1a1b225669188e54fce2a3fe721afce030f3df36cc5c189477d8115160b1103aa3a44a2955da0080463a2ec4dbb665a0bdc1400b5e9db8a6c43ef3ae904d5"}) 03:31:51 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x7, 0x81, 0x7, 0x7}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x10000, 0x0, 0x6749, 0x811, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x40) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10040, 0x0) 03:31:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x36, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x400000000000000) 03:31:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x400) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000000c0)=0x156e) 03:31:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 03:31:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 03:31:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x3, 0x17, 0x1, 0x0, 0x0, 0x0, 0x0}) 03:31:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed, 0x40], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0189436, &(0x7f0000000080)) 03:31:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x0, 0xa, 0x3, 0x4, 0x54, 0x9f01, &(0x7f00000000c0)="1f076d176bf1b2fe227dffccca76d1eddb51a88737f73677640796902a8ac7938234ee853e55bf859fbbb185f6dd71bc14539e72d575044a6fc566977ab2e1497c5c95a8895dbff049fd0be4b1be352161d3c016"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6, 0xfffff7ed], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.103537] usb usb4: usbfs: process 29713 (syz-executor.4) did not claim interface 0 before use 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.143669] usb usb4: usbfs: process 29713 (syz-executor.4) did not claim interface 0 before use 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 4: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000001c0)=0x8) 03:31:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x0, 0xa, 0x3, 0x4, 0x54, 0x9f01, &(0x7f00000000c0)="1f076d176bf1b2fe227dffccca76d1eddb51a88737f73677640796902a8ac7938234ee853e55bf859fbbb185f6dd71bc14539e72d575044a6fc566977ab2e1497c5c95a8895dbff049fd0be4b1be352161d3c016"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6, 0x7], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)) 03:31:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xfaee) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 03:31:52 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000001c0)=0x8) 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x0, 0xa, 0x3, 0x4, 0x54, 0x9f01, &(0x7f00000000c0)="1f076d176bf1b2fe227dffccca76d1eddb51a88737f73677640796902a8ac7938234ee853e55bf859fbbb185f6dd71bc14539e72d575044a6fc566977ab2e1497c5c95a8895dbff049fd0be4b1be352161d3c016"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.427254] usb usb4: usbfs: process 29750 (syz-executor.1) did not claim interface 0 before use 03:31:52 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000001c0)=0x8) 03:31:52 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.521408] usb usb4: usbfs: process 29761 (syz-executor.1) did not claim interface 0 before use 03:31:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x0, 0xa, 0x3, 0x4, 0x54, 0x9f01, &(0x7f00000000c0)="1f076d176bf1b2fe227dffccca76d1eddb51a88737f73677640796902a8ac7938234ee853e55bf859fbbb185f6dd71bc14539e72d575044a6fc566977ab2e1497c5c95a8895dbff049fd0be4b1be352161d3c016"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6, 0x2], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xc4, 0x240081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') 03:31:52 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000001c0)=0x8) 03:31:52 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.674611] usb usb4: usbfs: process 29775 (syz-executor.1) did not claim interface 0 before use 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x0, 0xa, 0x3, 0x4, 0x54, 0x9f01, &(0x7f00000000c0)="1f076d176bf1b2fe227dffccca76d1eddb51a88737f73677640796902a8ac7938234ee853e55bf859fbbb185f6dd71bc14539e72d575044a6fc566977ab2e1497c5c95a8895dbff049fd0be4b1be352161d3c016"}) 03:31:52 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) 03:31:52 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7, 0x80], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:52 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10541) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r0, 0x0, r1, 0x5}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = syz_open_dev$char_raw(&(0x7f00000002c0)='/dev/raw/raw#\x00', 0x1, 0x210001) ioctl$CHAR_RAW_REPORTZONE(r3, 0xc0101282, &(0x7f0000000300)={0xffffffffffff1798, 0x1, 0x0, [{0x100, 0x101, 0x3, 0x40, 0x80, 0x3f, 0x8}]}) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000140)=0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x402401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000280)={0x60, 0x10, 0x401, 0xd923, 0x99, 0x1, &(0x7f00000001c0)="b8728c6a3f4b34a8bf19f25d7d33867855144b6a96f23ded5ec4b3cde90c70ec74f97c7702bba8047bca25fe223f2af03ab609038919c1e20ad31a7f1fa1412a9f3922b86065b486443f0349170b192994ebab0f4d88349e264b282d26fb8dba3abae5f18cd51b1d8d228e5bc47056b921301ebf5b2ab35284a337db8baac5040f3f5b8038963d2c0154e9192772188272b1e183c1d90dc1dc"}) [ 2140.829424] usb usb4: usbfs: process 29790 (syz-executor.1) did not claim interface 0 before use 03:31:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, 0x0) 03:31:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) 03:31:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x885c3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2141.062156] usb usb4: usbfs: process 29815 (syz-executor.1) did not claim interface 0 before use 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, 0x0) 03:31:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x309841) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000100)={0x1, &(0x7f0000000080)="ef7fc7a7557df226785d842965648cbcdf6abae4e52e2adac5b0e07f5e7048e6819a61f260075ba9072aa25ec7995856404abce4444513780a272e6890cd086d8c96342c7807fa49b518dee097ccb3461a447cd5fbffdeed3f6211"}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) [ 2141.199769] usb usb4: usbfs: process 29827 (syz-executor.1) did not claim interface 0 before use 03:31:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, 0x0) 03:31:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800, 0x7], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffde5, 0x6, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xc) 03:31:53 executing program 1: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 1: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80, 0x800], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2261b2c7, 0x50c040) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x25a7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x40, 0x14, 0xb03, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:53 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81, 0x80], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:53 executing program 1: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:53 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f00000000c0)=0x8001, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x7, 0x9, 0x0, 0x0, 0x2, 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250200000006000600040000792f00090000000000080002800100000008000500ffff4b01e47505010100000000000000000000000000000005000500ac1e01010800080002000000"], 0x60}, 0x1, 0x0, 0x0, 0xcc0e5}, 0x8000) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000080)=[0x3ff, 0x6]) 03:31:53 executing program 3: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6, 0x81], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xfaee) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 03:31:53 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x47, 0xfffffffb, &(0x7f0000000040)="9ff55aa853d23fc06588999f9d840051b42f632b859b7051e177abd5fd3d4b8bd2603d2161f90c752caac9bd38ac833a3cfaadb6de6db67a6985611accd0eed388a75ed5041045"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x182) 03:31:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:53 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:53 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xfaee) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaab, 0x141240) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9, 0x8000], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xfaee) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xfaee) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf, 0xfffffff9], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) 03:31:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000001100)={0xb3, "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"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001480)=0x1) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000014c0)={0x0, &(0x7f0000000040)="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"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000010c0)=0x7ff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001440)={0x0, 0xf, 0xe, 0x7ff, 0x43, 0x2, &(0x7f00000013c0)="8f4c4dc357e5e5d2118b72eb1e91b24eb86eb6390321eef4efcb1611346653c89f8225e0af3d58f0907cb9f3b7a23adcd78579276e11eb160673d5e8e0f43a130076ae"}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000001340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @bcast]}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001300)={&(0x7f0000001240), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff, 0x9aaf], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81, 0xff], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x80000001, 0x101, 0xc5, 0x5, 0x6}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x0, 0x7, 0x7, 0x4, 0x0, 0x8, 0x0}) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x545, {0x1, 0x8001, 0x3, 0x80000001, 0x401, 0x1}}) 03:31:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800, @default, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204, 0x81], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) 03:31:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x100) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f, 0x204], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) 03:31:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1, 0x0, 0x0, 0xffffff6f], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:54 executing program 4: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000280)={0xff, "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"}) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x652a40, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000040)={0x20, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0xe, 0x0, 0x40, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x9, 0xb0400) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000200)=""/103) 03:31:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, &(0x7f0000000200)=""/87, 0x57) write$vhost_msg(r1, 0x0, 0x0) 03:31:55 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x5}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x1], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:55 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:55 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r1, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:55 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x2, 0x1}) 03:31:55 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:55 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f) 03:31:55 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe, 0x6], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000080)={0x0, &(0x7f0000000040)="5f015caab543295940d1ff2ab76279be745c22534a111d9f6dfdba5f19fb97e5cc20c29fa8a6f84a955bf659f1c350435de464"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) 03:31:55 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 03:31:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x7fff) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4, 0xfffffffe], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) 03:31:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 03:31:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000, 0x4], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r1, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) 03:31:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 03:31:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70, 0x1000], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:55 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0x1268, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:31:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x0, 0x1}) 03:31:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 03:31:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5, 0x70], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 03:31:56 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:56 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x0, 0x1}) 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac3, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 03:31:56 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045515, &(0x7f0000000080)) 03:31:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x0, 0x1}) 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593, 0x512a, 0x5], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x7fff, 0x7f, 0x4000}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:56 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1}) 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298, 0x593], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@generic={0x5, 0x6, 0x7, 0x6, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x14, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xe, 0x3ff, 0x1}, 0x10}, 0x78) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000280)={0x4922, 0xa, [{0x9}, {0x2, 0x1}, {0xd, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0xe, 0x1}, {0xb}, {0xe, 0x1}, {0x7, 0x1}, {0x1, 0x1}]}) write$vhost_msg(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r0, 0x1, r1, 0x4}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe502) 03:31:56 executing program 4: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0x7000000) 03:31:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:56 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb03, 0xe507) 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1, 0x6e95f298], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1}) 03:31:56 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:56 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:31:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:56 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f, 0x1], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1}) [ 2144.535326] FAULT_INJECTION: forcing a failure. [ 2144.535326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2144.593406] CPU: 1 PID: 30194 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2144.601324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2144.610682] Call Trace: [ 2144.613280] dump_stack+0x1fc/0x2fe [ 2144.616925] should_fail.cold+0xa/0x14 [ 2144.620822] ? lock_acquire+0x170/0x3c0 [ 2144.624805] ? setup_fault_attr+0x200/0x200 [ 2144.629138] __alloc_pages_nodemask+0x239/0x2890 [ 2144.633917] ? mark_held_locks+0xf0/0xf0 [ 2144.638010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2144.642867] ? lock_downgrade+0x720/0x720 [ 2144.647014] ? lock_acquire+0x170/0x3c0 [ 2144.650993] ? __might_fault+0xef/0x1d0 [ 2144.654989] alloc_pages_current+0x193/0x2a0 [ 2144.659417] __get_free_pages+0x8/0x40 [ 2144.663312] proc_control+0x18c/0x7f0 [ 2144.667119] ? proc_do_submiturb+0x3af0/0x3af0 [ 2144.671712] ? _kstrtoull+0x186/0x420 [ 2144.675518] ? _parse_integer+0x180/0x180 [ 2144.679675] usbdev_do_ioctl+0x13ad/0x3030 [ 2144.683921] ? proc_bulk+0x860/0x860 [ 2144.687643] ? __lock_acquire+0x6de/0x3ff0 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9, 0x0, 0x8f], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x9], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2144.691893] ? get_pid_task+0xf4/0x190 [ 2144.695783] ? mark_held_locks+0xf0/0xf0 [ 2144.699850] ? proc_fail_nth_write+0x95/0x1d0 [ 2144.704353] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2144.709302] ? usbdev_compat_ioctl+0x30/0x30 [ 2144.713717] usbdev_ioctl+0x21/0x30 [ 2144.717355] do_vfs_ioctl+0xcdb/0x12e0 [ 2144.721249] ? lock_downgrade+0x720/0x720 [ 2144.725399] ? check_preemption_disabled+0x41/0x280 [ 2144.730420] ? ioctl_preallocate+0x200/0x200 [ 2144.734836] ? __fget+0x356/0x510 [ 2144.738299] ? do_dup2+0x450/0x450 [ 2144.741843] ? vfs_write+0x393/0x540 [ 2144.745565] ? fput+0x2b/0x190 [ 2144.748769] ksys_ioctl+0x9b/0xc0 [ 2144.752241] __x64_sys_ioctl+0x6f/0xb0 [ 2144.756152] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2144.760739] do_syscall_64+0xf9/0x620 [ 2144.764551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2144.769739] RIP: 0033:0x45deb9 [ 2144.772935] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:31:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4, 0x2], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1a1000) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) [ 2144.791891] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2144.799589] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2144.806862] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2144.814130] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2144.821408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2144.828678] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c 03:31:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:31:57 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff, 0x4], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x2, &(0x7f0000000180)) 03:31:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x2, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2144.981555] FAULT_INJECTION: forcing a failure. [ 2144.981555] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.993591] usb usb4: usbfs: process 30233 (syz-executor.1) did not claim interface 0 before use 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1, 0x7fff], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2145.049130] CPU: 1 PID: 30234 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2145.057047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2145.066408] Call Trace: [ 2145.069011] dump_stack+0x1fc/0x2fe [ 2145.072658] should_fail.cold+0xa/0x14 [ 2145.076571] ? setup_fault_attr+0x200/0x200 [ 2145.080920] __should_failslab+0x115/0x180 [ 2145.085170] should_failslab+0x5/0xf [ 2145.088894] kmem_cache_alloc_trace+0x284/0x380 [ 2145.093608] usb_control_msg+0xb9/0x4a0 [ 2145.097601] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2145.102107] ? wait_for_completion_io+0x10/0x10 [ 2145.106801] proc_control+0x322/0x7f0 [ 2145.110618] ? proc_do_submiturb+0x3af0/0x3af0 [ 2145.115221] ? _kstrtoull+0x186/0x420 [ 2145.119210] ? _parse_integer+0x180/0x180 [ 2145.123372] usbdev_do_ioctl+0x13ad/0x3030 [ 2145.127620] ? proc_bulk+0x860/0x860 [ 2145.131345] ? __lock_acquire+0x6de/0x3ff0 [ 2145.135607] ? get_pid_task+0xf4/0x190 [ 2145.139527] ? mark_held_locks+0xf0/0xf0 [ 2145.143602] ? proc_fail_nth_write+0x95/0x1d0 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5421, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2145.148112] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2145.153072] ? usbdev_compat_ioctl+0x30/0x30 [ 2145.157499] usbdev_ioctl+0x21/0x30 [ 2145.161147] do_vfs_ioctl+0xcdb/0x12e0 [ 2145.165052] ? lock_downgrade+0x720/0x720 [ 2145.169215] ? check_preemption_disabled+0x41/0x280 [ 2145.174250] ? ioctl_preallocate+0x200/0x200 [ 2145.178679] ? __fget+0x356/0x510 [ 2145.182157] ? do_dup2+0x450/0x450 [ 2145.185704] ? vfs_write+0x393/0x540 [ 2145.189434] ? fput+0x2b/0x190 [ 2145.192660] ksys_ioctl+0x9b/0xc0 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff, 0x1], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2145.196150] __x64_sys_ioctl+0x6f/0xb0 [ 2145.200050] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2145.204643] do_syscall_64+0xf9/0x620 [ 2145.208457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2145.213653] RIP: 0033:0x45deb9 [ 2145.216859] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2145.235772] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:31:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5450, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2145.243622] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2145.250900] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2145.258187] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2145.265472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2145.272750] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c 03:31:57 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:31:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5421, &(0x7f0000000180)) 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7, 0xfff], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) read$usbfs(r0, &(0x7f0000000200)=""/87, 0x57) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5451, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2145.443448] usb usb4: usbfs: process 30267 (syz-executor.1) did not claim interface 0 before use [ 2145.470038] FAULT_INJECTION: forcing a failure. [ 2145.470038] name failslab, interval 1, probability 0, space 0, times 0 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9, 0x7], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2145.529974] CPU: 1 PID: 30272 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2145.538030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2145.547407] Call Trace: [ 2145.550015] dump_stack+0x1fc/0x2fe [ 2145.553663] should_fail.cold+0xa/0x14 [ 2145.557578] ? setup_fault_attr+0x200/0x200 [ 2145.562190] __should_failslab+0x115/0x180 [ 2145.566439] should_failslab+0x5/0xf [ 2145.570284] __kmalloc+0x2ab/0x3c0 [ 2145.573886] ? usb_alloc_urb+0x20/0x50 [ 2145.577791] usb_alloc_urb+0x20/0x50 [ 2145.581524] usb_control_msg+0x1c9/0x4a0 [ 2145.585718] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2145.590229] ? wait_for_completion_io+0x10/0x10 [ 2145.594919] proc_control+0x322/0x7f0 [ 2145.598895] ? proc_do_submiturb+0x3af0/0x3af0 [ 2145.603502] ? _kstrtoull+0x186/0x420 [ 2145.607316] ? _parse_integer+0x180/0x180 [ 2145.611485] usbdev_do_ioctl+0x13ad/0x3030 [ 2145.615741] ? proc_bulk+0x860/0x860 [ 2145.619473] ? __lock_acquire+0x6de/0x3ff0 [ 2145.623741] ? get_pid_task+0xf4/0x190 [ 2145.627647] ? mark_held_locks+0xf0/0xf0 [ 2145.631725] ? proc_fail_nth_write+0x95/0x1d0 [ 2145.636679] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2145.641896] ? usbdev_compat_ioctl+0x30/0x30 [ 2145.646323] usbdev_ioctl+0x21/0x30 [ 2145.649967] do_vfs_ioctl+0xcdb/0x12e0 [ 2145.653869] ? lock_downgrade+0x720/0x720 [ 2145.658034] ? check_preemption_disabled+0x41/0x280 [ 2145.663086] ? ioctl_preallocate+0x200/0x200 [ 2145.667518] ? __fget+0x356/0x510 [ 2145.670991] ? do_dup2+0x450/0x450 [ 2145.674547] ? vfs_write+0x393/0x540 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5452, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5460, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2145.678285] ? fput+0x2b/0x190 [ 2145.681500] ksys_ioctl+0x9b/0xc0 [ 2145.684983] __x64_sys_ioctl+0x6f/0xb0 [ 2145.688883] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2145.693480] do_syscall_64+0xf9/0x620 [ 2145.697302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2145.702505] RIP: 0033:0x45deb9 [ 2145.705705] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x550b, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x2, &(0x7f0000000040)={0x1, 0x1}) [ 2145.724613] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2145.732337] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2145.739619] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2145.746900] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2145.754198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2145.761483] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c 03:31:57 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5450, &(0x7f0000000180)) 03:31:57 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 03:31:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x5421, &(0x7f0000000040)={0x1, 0x1}) 03:31:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5514, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1, 0x9], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:58 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 03:31:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x551f, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x5450, &(0x7f0000000040)={0x1, 0x1}) 03:31:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5451, &(0x7f0000000180)) [ 2145.927245] FAULT_INJECTION: forcing a failure. [ 2145.927245] name failslab, interval 1, probability 0, space 0, times 0 03:31:58 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) [ 2146.007446] CPU: 1 PID: 30310 Comm: syz-executor.4 Not tainted 4.19.160-syzkaller #0 [ 2146.015507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2146.024875] Call Trace: [ 2146.027478] dump_stack+0x1fc/0x2fe [ 2146.031130] should_fail.cold+0xa/0x14 [ 2146.035039] ? setup_fault_attr+0x200/0x200 [ 2146.039376] ? lock_acquire+0x170/0x3c0 [ 2146.043375] __should_failslab+0x115/0x180 [ 2146.047638] should_failslab+0x5/0xf [ 2146.051368] __kmalloc+0x2ab/0x3c0 [ 2146.054922] ? usb_hcd_submit_urb+0x656/0x23c0 [ 2146.059524] usb_hcd_submit_urb+0x656/0x23c0 [ 2146.063958] ? kasan_kmalloc+0x139/0x160 [ 2146.068037] ? unlink1+0x500/0x500 [ 2146.071595] ? proc_control+0x322/0x7f0 [ 2146.075588] ? usbdev_do_ioctl+0x13ad/0x3030 [ 2146.080015] ? usbdev_ioctl+0x21/0x30 [ 2146.083832] ? do_vfs_ioctl+0xcdb/0x12e0 [ 2146.087907] ? ksys_ioctl+0x9b/0xc0 [ 2146.091548] ? __x64_sys_ioctl+0x6f/0xb0 [ 2146.095624] ? do_syscall_64+0xf9/0x620 [ 2146.099612] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:31:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) [ 2146.104989] ? do_syscall_64+0xf9/0x620 [ 2146.108976] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2146.114370] usb_submit_urb+0xb2f/0x13b0 [ 2146.118455] usb_start_wait_urb+0x108/0x4c0 [ 2146.122791] ? setup_fault_attr+0x200/0x200 [ 2146.127132] ? usb_api_blocking_completion+0xa0/0xa0 [ 2146.132263] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2146.137510] ? memset+0x20/0x40 [ 2146.140943] usb_control_msg+0x31c/0x4a0 [ 2146.145154] ? usb_start_wait_urb+0x4c0/0x4c0 [ 2146.149670] ? wait_for_completion_io+0x10/0x10 [ 2146.154364] proc_control+0x322/0x7f0 [ 2146.158194] ? proc_do_submiturb+0x3af0/0x3af0 [ 2146.162797] ? _kstrtoull+0x186/0x420 [ 2146.166618] ? _parse_integer+0x180/0x180 [ 2146.170786] usbdev_do_ioctl+0x13ad/0x3030 [ 2146.175045] ? proc_bulk+0x860/0x860 [ 2146.178779] ? __lock_acquire+0x6de/0x3ff0 [ 2146.183072] ? get_pid_task+0xf4/0x190 [ 2146.186973] ? mark_held_locks+0xf0/0xf0 [ 2146.191054] ? proc_fail_nth_write+0x95/0x1d0 [ 2146.195567] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 2146.200528] ? usbdev_compat_ioctl+0x30/0x30 [ 2146.204955] usbdev_ioctl+0x21/0x30 [ 2146.208603] do_vfs_ioctl+0xcdb/0x12e0 [ 2146.212506] ? lock_downgrade+0x720/0x720 [ 2146.216668] ? check_preemption_disabled+0x41/0x280 [ 2146.221698] ? ioctl_preallocate+0x200/0x200 [ 2146.226215] ? __fget+0x356/0x510 [ 2146.229806] ? do_dup2+0x450/0x450 [ 2146.233361] ? vfs_write+0x393/0x540 [ 2146.237091] ? fput+0x2b/0x190 [ 2146.240305] ksys_ioctl+0x9b/0xc0 [ 2146.243773] __x64_sys_ioctl+0x6f/0xb0 [ 2146.247848] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2146.252449] do_syscall_64+0xf9/0x620 [ 2146.256269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2146.261470] RIP: 0033:0x45deb9 [ 2146.264676] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2146.283702] RSP: 002b:00007fc886cbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2146.291424] RAX: ffffffffffffffda RBX: 000000000001b080 RCX: 000000000045deb9 [ 2146.298797] RDX: 0000000020001040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 2146.306094] RBP: 00007fc886cbcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2146.313391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2146.320669] R13: 00007ffe9eb37f3f R14: 00007fc886cbd9c0 R15: 000000000118bf2c 03:31:58 executing program 4 (fault-call:1 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3, 0x1], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5452, &(0x7f0000000180)) 03:31:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x5451, &(0x7f0000000040)={0x1, 0x1}) 03:31:58 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) 03:31:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2, 0x3], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5460, &(0x7f0000000180)) 03:31:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x5452, &(0x7f0000000040)={0x1, 0x1}) 03:31:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) 03:31:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4, 0x2], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x2, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x550b, &(0x7f0000000180)) 03:31:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x5460, &(0x7f0000000040)={0x1, 0x1}) 03:31:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5421, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x223) 03:31:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40, 0x4], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5514, &(0x7f0000000180)) 03:31:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x550b, &(0x7f0000000040)={0x1, 0x1}) 03:31:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x40], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x551f, &(0x7f0000000180)) 03:31:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5450, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x2302) 03:31:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004551e, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x5514, &(0x7f0000000040)={0x1, 0x1}) 03:31:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4004550c, &(0x7f0000000180)) 03:31:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5451, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xeffd) 03:31:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x8], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x40049409, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x551f, &(0x7f0000000040)={0x1, 0x1}) 03:31:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xfdef) 03:31:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5452, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550c, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:31:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x10001], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:31:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x23020000) 03:31:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x4004550c, &(0x7f0000000040)={0x1, 0x1}) 03:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4004550d, &(0x7f0000000180)) 03:32:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5460, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xeffdffff) 03:32:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2, 0x0, 0x1], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xfffffdef) 03:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4004551e, &(0x7f0000000180)) 03:32:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x550b, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4, 0x2], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x7ffffffff000) 03:32:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x5514, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, &(0x7f0000000040)={0x1, 0x1}) 03:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x40049409, &(0x7f0000000180)) 03:32:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8, 0x4], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x551f, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x4004551e, &(0x7f0000000040)={0x1, 0x1}) 03:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4008550c, &(0x7f0000000180)) 03:32:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4, 0x8], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xf0ffffff7f0000) 03:32:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x40085511, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x40049409, &(0x7f0000000040)={0x1, 0x1}) 03:32:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4020940d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001, 0x72e4], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x2302000000000000) 03:32:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x4008550c, &(0x7f0000000040)={0x1, 0x1}) 03:32:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x41045508, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xeffdffffffffffff) 03:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4008550d, &(0x7f0000000180)) 03:32:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3, 0xffff0001], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045503, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xffffffff00000000) 03:32:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2, 0x3], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x40085511, &(0x7f0000000180)) 03:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0xfffffffffffffdef) [ 2149.818031] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #2 03:32:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x4008550d, &(0x7f0000000040)={0x1, 0x1}) 03:32:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4004551e, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x2], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x8001) 03:32:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4020940d, &(0x7f0000000180)) 03:32:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x40049409, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x41045508, &(0x7f0000000180)) 03:32:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x40085511, &(0x7f0000000040)={0x1, 0x1}) 03:32:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a3000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x4, 0x3, 0x6, 0x2, 0xfff, 0x8}) read$usbfs(r0, 0x0, 0x0) ioctl$CHAR_RAW_BSZSET(r0, 0x40081271, &(0x7f0000000040)=0x3) 03:32:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550c, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x4020940d, &(0x7f0000000040)={0x1, 0x1}) 03:32:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1, 0x3], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045503, &(0x7f0000000180)) 03:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb9, 0x1a5000) read$usbfs(r0, 0x0, 0x0) 03:32:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, &(0x7f0000000040)={0x1, 0x1}) 03:32:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5, 0x1], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r2 = socket(0x21, 0x800, 0x7fff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x991e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x1368, 0xa, [{0x9}, {0xb, 0x1}, {0xb, 0x1}, {0xe, 0x1}, {0x6}, {}, {0x2, 0x1}, {0xb, 0x1}, {0x1}, {0x2}]}) read$usbfs(r1, 0x0, 0x0) 03:32:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045518, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045502, &(0x7f0000000040)={0x1, 0x1}) 03:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045505, &(0x7f0000000180)) [ 2150.441687] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 03:32:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5, 0x5], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8004550f, &(0x7f0000000180)) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045504, &(0x7f0000000040)={0x1, 0x1}) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045510, &(0x7f0000000180)) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1, 0x5], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045505, &(0x7f0000000040)={0x1, 0x1}) 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8004551a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0xad02) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0xea60}}], 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) read$usbfs(r0, 0x0, 0x0) 03:32:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x40085511, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045515, &(0x7f0000000180)) [ 2151.194052] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #129 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80085504, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1, 0xffffffc1], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 2: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xffffff76) r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045506, &(0x7f0000000040)={0x1, 0x1}) 03:32:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x4020940d, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045518, &(0x7f0000000180)) [ 2151.351526] usb usb4: usbfs: process 30670 (syz-executor.5) did not claim interface 2 before use 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400, 0x1], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x84080) read$usbfs(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x64970ff0, 0x521000) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0xffff) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x3, 0x1}) r2 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote, @netrom, 0x0, [@netrom, @rose, @default, @null, @remote, @rose]}, &(0x7f0000000100)=0x40, 0x80800) getsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045507, &(0x7f0000000040)={0x1, 0x1}) 03:32:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x41045508, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8004551a, &(0x7f0000000180)) 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7, 0x400], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xfffffff9, 0x8]) read$usbfs(r0, 0x0, 0x0) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045509, &(0x7f0000000040)={0x1, 0x1}) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80085504, &(0x7f0000000180)) 03:32:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045503, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff, 0x7], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008551d, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40100}, 0x80004) read$usbfs(r0, 0x0, 0x0) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8004550f, &(0x7f0000000040)={0x1, 0x1}) [ 2151.731921] usb usb4: usbfs: process 30710 (syz-executor.3) did not claim interface 0 before use 03:32:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200, 0x3ff], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8008550e, &(0x7f0000000180)) 03:32:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8010550e, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045510, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) read$char_raw(r1, &(0x7f0000000200)={""/51135}, 0xc800) read$usbfs(r0, 0x0, 0x0) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2151.920910] usb usb4: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #768 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8008551c, &(0x7f0000000180)) 03:32:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3, 0xfffffffd], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8008551d, &(0x7f0000000180)) [ 2152.090439] usb usb4: usbfs: process 30746 (syz-executor.1) did not claim interface 0 before use 03:32:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045518, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x212a00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/225) read$usbfs(r0, 0x0, 0x0) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7, 0x3], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8010550e, &(0x7f0000000180)) 03:32:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045519, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7, 0x7], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x40000, 0x5a1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x8) read$usbfs(r0, 0x0, 0x0) 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x802c550a, &(0x7f0000000180)) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9, 0xf7], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8004551a, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x42e06d21, 0x92a02) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x40) 03:32:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045518, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8038550a, &(0x7f0000000180)) 03:32:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045563, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc00c5512, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r1, 0x0, 0x0) 03:32:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200, 0x9], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8108551b, &(0x7f0000000180)) 03:32:04 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz1\x00', {0x0, 0x5, 0x4, 0x8}, 0x42, [0x1f, 0x1, 0xaa68, 0x6, 0x60, 0x8001, 0x9b55, 0x3, 0x4, 0x1, 0xfffc0000, 0x1, 0x80000001, 0x401, 0x4, 0x16a, 0x2, 0xa8a4, 0x0, 0x7, 0x4, 0x9, 0x3, 0x53a, 0x6, 0x5, 0x4ebe, 0x6b0, 0x200, 0x10000, 0x10000, 0x7, 0x751a5ad4, 0x50, 0x5, 0x11b, 0x6f6d9333, 0x1007c0, 0x3, 0x200, 0x200, 0x7, 0x1, 0x9, 0x8, 0x80000001, 0x9, 0x3ff, 0x2, 0x4, 0x8001, 0x215, 0x8, 0x958, 0x5, 0x1, 0x9a, 0x400, 0x3, 0x3, 0x6, 0x8, 0x1f, 0x8], [0x1, 0x2, 0xffffffff, 0x5, 0x4, 0xd, 0x0, 0x7f5bf501, 0xffffff81, 0x4, 0x7, 0x9, 0x4, 0xffffffff, 0xffffff0e, 0x1f, 0x8, 0x10001, 0x7, 0x0, 0x8, 0xca6, 0x8, 0x3, 0x80, 0x0, 0x4f, 0x200, 0x0, 0xfff, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x6, 0x0, 0x401, 0x5, 0x8, 0x2, 0x5, 0x0, 0x8001, 0x2, 0x3ff, 0xffffffff, 0xc, 0x0, 0x69, 0x86c4, 0x5, 0x7, 0x20000005, 0xffffffff, 0x7, 0x8a5, 0x7a49, 0x7, 0x8, 0x1ff, 0x5d02], [0x0, 0xffffffff, 0x3, 0xffffffff, 0x400, 0x3, 0x1, 0x4, 0x1, 0x10001, 0x3, 0x5, 0x48, 0x80000001, 0x5, 0x24e8, 0xffffffff, 0x6, 0xce2, 0x3, 0xfff, 0x17, 0x1000, 0x6, 0x7ff, 0x0, 0x81, 0x9, 0x200, 0x34, 0x3, 0x2, 0x2, 0x2, 0x4, 0x4, 0x2c5, 0x2, 0x8080, 0x0, 0xfffff784, 0x0, 0xa57, 0x3, 0x2e0, 0x8, 0x9, 0x8001, 0x44, 0xffff7fff, 0x5, 0x2, 0x10000, 0xc3e, 0x1000, 0x8, 0x6, 0x1, 0x8, 0x3, 0x1000, 0x1, 0x6, 0x1], [0xff, 0x7, 0x7, 0xfffff6ca, 0x3ec, 0x5c1f, 0x1f, 0x10001, 0x10001, 0x101, 0x1, 0x1, 0x81, 0x7fffffff, 0xff, 0x1c, 0x11bc00, 0x4, 0x8000, 0xca4, 0x7, 0x7, 0x1000, 0x9, 0xc84a, 0x8, 0x20, 0x0, 0x0, 0x8001, 0x81, 0x1, 0x8, 0x470, 0x0, 0x7fff, 0xffff, 0x6, 0x1, 0x7, 0x6, 0x8000, 0x9, 0x3, 0x1, 0xfffffffc, 0x0, 0xff, 0xfc, 0x3, 0x40, 0xc583, 0x1ff, 0x10000, 0xfff, 0x40, 0x4e723c03, 0x81, 0x5, 0x7, 0x3ff, 0x1, 0x5, 0x7fff]}, 0x45c) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x7fffffff) read$usbfs(r1, 0x0, 0x0) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045564, &(0x7f0000000040)={0x1, 0x1}) 03:32:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8004551a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4, 0x200], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0045878, &(0x7f0000000180)) 03:32:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105502, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x2a4542) read$usbfs(r0, 0x0, 0x0) pkey_alloc(0x0, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x75) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80085504, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x80085504, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9, 0x4], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0045878, &(0x7f0000000180)) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000)=0x1, 0x4) read$usbfs(r0, &(0x7f0000000080)=""/107, 0x6b) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8008550e, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8, 0x9], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc00c5512, &(0x7f0000000180)) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8008551c, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, @null, @rose={'rose', 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x8], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0105500, &(0x7f0000000180)) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8008551d, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0105502, &(0x7f0000000180)) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8008551d, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1c00) read$usbfs(r0, 0x0, 0x0) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0189436, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0105512, &(0x7f0000000180)) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8010550e, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8010550e, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000140)) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x10, 0x400, 0x6}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000200)={'syz1\x00', {0x6, 0xd4, 0x7, 0x5}, 0x30, [0x8000, 0x40, 0x7, 0x5, 0x2, 0x4, 0x2, 0x0, 0x8, 0x80000000, 0x1, 0xfc74, 0x800, 0x7, 0x800, 0x8, 0x1, 0x4, 0x2, 0x5, 0x3f, 0x2, 0xc4000, 0x10001, 0x9, 0x10000, 0x9, 0x8001, 0x1, 0x5, 0x8000, 0xfff, 0x0, 0x4, 0x3, 0x48327d0c, 0x4, 0x8, 0xfd, 0x2913, 0x7, 0x20, 0xfffffff7, 0x1, 0x58, 0x8, 0x0, 0x3f, 0xffffff80, 0x712, 0x40, 0x8, 0x1, 0x1ff, 0xffffffff, 0x400, 0x6, 0x3f, 0xfff, 0x6, 0x4, 0x80, 0x6, 0x8], [0x9, 0x8, 0x2, 0x8001, 0x5, 0x6, 0xb4bd, 0xca, 0x9, 0xecc, 0x4, 0x400, 0x5, 0x0, 0xfffffffd, 0x1, 0xaf9, 0x400, 0x9, 0x8, 0xfff, 0xffffffff, 0x8001, 0x3f, 0xff, 0x5e, 0x4, 0x3f, 0x8, 0x7f, 0x4, 0x0, 0x0, 0x3, 0x100, 0x7c000, 0x7, 0x568e5cdf, 0x8001, 0x8001, 0x2, 0x2, 0x8, 0x3f, 0x7fff, 0x6, 0x6, 0xac94, 0x80000001, 0x2, 0x8, 0x9cec, 0x3, 0x8fea, 0x7, 0xffffffff, 0xffff, 0x6, 0xff, 0x7, 0x9, 0x87, 0x1, 0x1ff], [0x3, 0x5, 0x4, 0xf6f, 0x9, 0x5, 0x5506, 0x225, 0x4, 0x3, 0xffffffff, 0xffffffff, 0xfffffffa, 0xa2b8, 0x7, 0x2, 0x3, 0x6, 0x400, 0x5, 0x4, 0x3, 0x7, 0xfffeffff, 0x5, 0x80000000, 0x10000000, 0x1, 0x40, 0x1, 0x3, 0x3ff, 0x8, 0x929a, 0xe511, 0xfffffffc, 0xf7710905, 0x2, 0x81, 0x6, 0x9, 0x7fff, 0x0, 0x9, 0x1, 0x0, 0x7f, 0xf64, 0x71622b94, 0x1000, 0x7, 0xbe4, 0x6, 0xffffffff, 0x400, 0x3, 0x2, 0x2, 0xfffffffc, 0x6, 0x9, 0x0, 0x4000, 0x10000], [0x7, 0x6, 0x2, 0x8697, 0x5ea4, 0x0, 0x800, 0x3, 0x3f, 0x80, 0x6, 0x1f, 0x200, 0x0, 0xfba7, 0x1, 0xffa3, 0x9, 0x5ced, 0x9, 0x1, 0x1, 0x3, 0x4, 0x9, 0x1000000, 0x81, 0x97000000, 0x4, 0x9, 0x1000, 0x10100000, 0x0, 0x7ff, 0x80000000, 0x4, 0x0, 0x5, 0x8001, 0x8d, 0x80000000, 0x6, 0x66, 0x38, 0x1000, 0x4, 0x10000, 0x3, 0x80, 0x3ff, 0xfffff2f5, 0x400, 0x7ff, 0x8, 0x2, 0x200, 0xfffffffc, 0xff, 0x1, 0x2, 0x7, 0x3, 0x5, 0x1f]}, 0x45c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/pid\x00') 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1, 0x7], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc020660b, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0185500, &(0x7f0000000180)) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x802c550a, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3, 0x1], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x20080) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xc0, 0x0) r2 = syz_open_dev$char_raw(&(0x7f0000000200)='/dev/raw/raw#\x00', 0x0, 0x60001) ioctl$CHAR_RAW_BSZSET(r2, 0x40081271, &(0x7f0000000240)=0x10000) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040841}, 0x4004804) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x1, 0x3}) read$usbfs(r0, 0x0, 0x0) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8038550a, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0185502, &(0x7f0000000180)) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8, 0x3], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:05 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0xc101}) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x480100) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2aa, 0x102) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xfa0b, 0x121000) read$usbfs(r1, 0x0, 0xc) 03:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x8108551b, &(0x7f0000000040)={0x1, 0x1}) 03:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0189436, &(0x7f0000000180)) 03:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6, 0x8], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb6, 0x2000) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x1, 0x1141}) read$usbfs(r0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000040)={0x7}) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0045878, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc020660b, &(0x7f0000000180)) 03:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff, 0x6], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0045878, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x1, "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"}) 03:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x138000000000, 0x284180) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x3) read$usbfs(r0, 0x0, 0x0) 03:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68, 0x7fff], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc00c5512, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 2: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x322, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000050) r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x3) 03:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc00c5512, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001, 0xd68], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0105500, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f, 0x8001], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 03:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xb}}, 0x78, 0x0, &(0x7f0000000040)="57fcfb1621489d3f591b6d73fd74c9aacd3b817f0abcca72508d2f1c9d21db729da5f2501c9a8adaf20d61fb938010b8662e99e33d78e24e81968f8a736123055b67410c8c15494927017575f1c88deeca59f3a6ba52ddd804ba426b87b24b43aac1d7df727e1551b3e2955d0776232a7296063e44c98de3"}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000100)) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000140)=0x45) socket$key(0xf, 0x3, 0x2) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) read$char_raw(0xffffffffffffffff, &(0x7f0000000200)={""/9574}, 0x2600) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f, 0x7f], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105502, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x4000) read$usbfs(r0, 0x0, 0x0) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0105512, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f, 0x3f], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x32000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x4401, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) read$usbfs(r1, 0x0, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x853, 0x800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000200)) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000140)=[0x0, 0x3ff]) write$vhost_msg(r3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000180)={0x881, @broadcast}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000000404, 0x288942) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_PG(r1, 0x1269, &(0x7f00000000c0)={0x9, 0x3f, 0x7f, &(0x7f0000000040)="8a9d1efb6ee6bb661d459f4f0dea545ea8136b6c0f8349c9d5e52baf49a57bf74823a82d421da288580cdfda8ba346f3782344a3f78b84070327548bc8165bdec1e76fafb09d0f9b33e231abdc710003fd27ca7d676ed4c865fcac9918857b7d4519d1afcdb3327a10ed7367aa1a08c70749bd36db8310e164ed2fb8c563a9"}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}) 03:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0185500, &(0x7f0000000040)={0x1, 0x1}) 03:32:06 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xf891, 0x204040) read$usbfs(0xffffffffffffffff, 0x0, 0xc) getsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:32:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000, 0x0, 0x3f], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0xf}}, 0xf5, 0x2, &(0x7f0000000040)="637d24cd031692bc81b7115bf37c4f9b8f7b3dcf7cdc44fb6bca08b31ce70a1b9293b5bed36de97109a4d8bcf952eda92ccd1c098a3a1c93c3583d3d6757b5f685e30be5bec8187a93164cfb9ec46eb534f36228afa9e151b7ecf994ba524d1fe856e79ac51ed54cc39de58f07d605d6b69f9dec598841658f67adac8e03c2a75173f2c814a0cdfc2ed3249da967fc4f09799c09180b99907f74c80f3f6880c5ff0e8dbb2d788c6606e950f912c67a422ed708d9ce54bb17c9f11c6ea711fc82ad8ff9fe2981b78286db2a7dfa8b59986b45dc2bbbe7cc341007346c4c76e63f291384361efcd2ab09c9fe3e98a135292880aa50fb"}) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2154.944902] usb usb4: usbfs: process 31069 (syz-executor.1) did not claim interface 0 before use 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8, 0x10000], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4040) read$usbfs(r1, 0x0, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @remote, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x800) read$usbfs(r0, &(0x7f0000000000)=""/139, 0x8b) 03:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0185502, &(0x7f0000000040)={0x1, 0x1}) 03:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2c8042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185503, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4000000003, 0x4a2000) read$usbfs(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x10080) [ 2155.109185] usb usb4: usbfs: process 31086 (syz-executor.1) did not claim interface 0 before use 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5, 0x8], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc0189436, &(0x7f0000000040)={0x1, 0x1}) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc01855a1, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3, 0x5], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}) 03:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000040)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000100)={0x3, &(0x7f0000000080)="ee0c1a22919eec78add01d0af8ad4491f81c966037177c4faee40d7da0a7515e1abfc53613ae84a1c8bce43984a3b5ade6e735e126f32d58ede99b3615f3c64003042a705eb7b9fa389a0766600064"}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000140)={{{0x0, 0x1}}, 0xb5, 0x401, &(0x7f00000001c0)="77be3f2a18531db1c71c5bcddc2b569c75b1f76b96b9c254db65216e5fe3e767867da98730c2a7d4e20d9c244e7e9b02a083c639d903e7f60cd7a44ccfa1c0f4f875c0b36239fadc49144943af066894780623f90a69da9ea1d2254f6b7dff6f3298bb48e13dbe86a8c984c94c7712738a42311b06d61da7049e13f71ee53149625e0b67ea68bfd53abf3b3f0671d0bcf91621dc2c19111e6cf094b2b12355e09cd8860d20b8b270c1ae423c67e1b62ae3cbff18b5"}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(r1, &(0x7f0000000200)=""/4096, 0x1000) read$usbfs(r0, 0x0, 0x0) 03:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0xc020660b, &(0x7f0000000040)={0x1, 0x1}) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0189436, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x400) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2b) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000000)={0x24, "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"}) 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8, 0x3], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x0, 0x1}) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc020660b, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x19, r2, 0x1, 0x1000, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000180)) 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2, 0x8], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) 03:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x7, 0x1}) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x100) read$usbfs(r0, 0x0, 0x0) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2155.660192] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0}) 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4, 0x2], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x8008000000004, 0x389540) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0x5, 0x1}) read$usbfs(r0, 0x0, 0x0) [ 2155.710823] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 03:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x8, 0x1}) 03:32:07 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x2) 03:32:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0}) 03:32:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a, 0x4], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0xd00) read$usbfs(r0, 0x0, 0x0) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x9, 0x1}) 03:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x200) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe, 0x0}) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5, 0x33a], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x0) read$usbfs(r0, 0x0, 0x0) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x63, 0x1}) 03:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0xd}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0xa1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0xbebdf07f, 0x0}) 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa, 0x5], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x40000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x40000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000080)=0xffffffff) [ 2156.170081] usb usb4: usbfs: process 31201 (syz-executor.4) did not claim interface 0 before use 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x30b680) ioctl$CHAR_RAW_GETSIZE64(r1, 0x80081272, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x64, 0x1}) 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2, 0xfffffffa], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x402000, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x4) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x513) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x67, 0x1}) 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd, 0x2], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x50cd, 0x12, [{0x6, 0x1}, {0x1}, {0x8, 0x1}, {0x7}, {0xa}, {0x9}, {0x8}, {0x6, 0x1}, {}, {}, {0x2, 0x1}, {0xa}, {0x9}, {0xe, 0x1}, {0x8}, {0x5, 0x1}, {0x2, 0x1}, {0xf}]}) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_getres(0x0, &(0x7f0000000040)) 03:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x7, 0x2, 0x8, 0x92ac, 0x5, 0x7}) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x444}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f0000000000)=0x9) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {0x5, 0x5, 0x8001}, 0x38, [0x7, 0x800, 0x9, 0x1, 0x1, 0xffff, 0x4, 0x8, 0x9, 0xff, 0x5, 0x7, 0x40, 0x1, 0x5, 0x8, 0x80000001, 0x4dd, 0x6, 0x6, 0x0, 0x6, 0x6, 0x278, 0x8, 0xe3b6, 0x0, 0x600, 0x9, 0xfff, 0x80000001, 0x58, 0x9, 0x7, 0x101, 0x100, 0x2, 0x0, 0x7ff, 0x4, 0x80000001, 0x10001, 0x9, 0x4, 0x0, 0xcb0a, 0x2, 0x8001, 0x1f, 0x5, 0x6, 0xfffff801, 0x8, 0x41b0, 0x401, 0x1f0, 0x20, 0x4, 0x2, 0x29f, 0x66f5, 0x0, 0x1, 0xe19], [0xfffffffb, 0x1, 0xfffffffe, 0x1, 0x7, 0x37c5, 0x4, 0x1, 0x8, 0x3f, 0x8c, 0x10001, 0xfff, 0x0, 0x2, 0x800, 0x1, 0x4, 0x800, 0x86, 0x7fffffff, 0x0, 0x7fffffff, 0x6, 0x1000, 0x2, 0x20, 0x5, 0x0, 0x2, 0x66, 0x140000, 0x3, 0x800, 0x5, 0xffffffff, 0x6, 0x1ff, 0x1, 0x8, 0x4, 0x9e, 0x0, 0x7fffffff, 0x7, 0x7f, 0x1, 0x9000000, 0x9, 0x3ff, 0x3f, 0x8001, 0x5, 0x0, 0x40, 0x7, 0x4, 0x1, 0x8, 0x4, 0x800, 0x40, 0x3f, 0xf66], [0x9, 0x5c68, 0x8, 0x3, 0x92, 0x7f, 0xfff, 0xd7cb, 0x9, 0x8, 0x1, 0x401, 0x76, 0x7ff, 0x2, 0x7, 0x0, 0xd21, 0x2, 0x4, 0x2, 0x4, 0x80000000, 0xbf96, 0x6, 0x5, 0x1, 0x2, 0xfff, 0x8, 0x7fffffff, 0x3, 0xfff, 0x1, 0x1, 0x8, 0x401, 0x5, 0x1, 0x425, 0x6, 0x800, 0x5, 0x800, 0xfffffc47, 0x8, 0x2, 0x5, 0x1f, 0x9, 0x9, 0xd7fd, 0xffffffff, 0x2, 0xffffff01, 0x4233, 0x9b, 0x3, 0x7, 0x7, 0x0, 0x69b0b56e, 0x7fffffff, 0x2], [0x7fffffff, 0x7, 0x1, 0x5e, 0x6, 0x10001, 0xe81d, 0x5, 0xfffffe01, 0x15, 0x88, 0x3, 0x4, 0xac5, 0xff, 0x5, 0x7, 0x7, 0x8001, 0x8000, 0x8000, 0xfffffff7, 0xc222, 0x3, 0x9, 0x7fffffff, 0x3f, 0x1000, 0x6e2, 0x81, 0x30e, 0x7, 0x1000, 0x7f, 0x8, 0x800, 0x8, 0x2, 0x6, 0x8, 0x8000000, 0x101, 0x400, 0x5, 0x9, 0x636, 0xd1da, 0xb, 0x2, 0x7358, 0x7f, 0x1, 0xb599, 0x1, 0x1, 0x1, 0x7fff, 0x800, 0x1f, 0xfffff6aa, 0xfff, 0xfffffffe, 0x7fffffff, 0xff]}, 0x45c) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7, 0x8fd], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) getegid() r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40200, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x4b9) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0x0, 0x1}) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1}) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x3e) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffff9cb4da69, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x200000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000100)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000810) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x18d040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000400)=0x1) read$usbfs(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x40004) 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d, 0x7], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)) 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x88042) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x15, 0x0, 0x4, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x5) pkey_free(0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x14100, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x1) [ 2156.651725] usb usb4: usbfs: process 31268 (syz-executor.1) did not claim interface 0 before use 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6, 0x2f47138d], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x294800) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x3, 0xd, 0x7, 0x8, 0xcb, 0x44, &(0x7f0000000080)="340f4dd49fa33fe70ac4cedb3caee206614ae2649c1835058c851c77da8b156bec65f4d84668eebf8ad5e669694c375c2a32adc9b12265fb2a7b3aff49646d23179524430f18328bef383d4ceeb5b342ad196263bd1386a4b9a535f4934a3257d907294fc37ab24062351c8bf6e0969432465e5b3a5ec91660db2a20e11336ed8dbfd8cf8a44778bfdf5149ca413d60a3e451ec2347210d6aa13848d3a337c784acfa51ebc6ab3a4fb088d62da7e22f6a8ecea6fbb490237098b7a5c08b4f551919615ba238ec3fc849aa3"}) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180)) 03:32:08 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) clock_gettime(0x1, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000080)={{r1, r2/1000+60000}, 0x3, 0x4, 0x4}, 0x18) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$vhost_msg(r3, 0x0, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x0, 0x2710}, 0x4, 0x3, 0x8}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x154740) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) 03:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x1) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000000c0)=0x1ff) 03:32:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x22000, 0x0) r1 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x1, 0x501001) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) r2 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x60400) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000200)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r4, 0x1, r5, 0x0, 0x80000}) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000040)=0x4009) 03:32:08 executing program 5: ioctl$CHAR_RAW_GETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x4bc002) read$usbfs(r0, 0x0, 0x0) [ 2156.807803] usb usb4: usbfs: process 31292 (syz-executor.1) did not claim interface 0 before use 03:32:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000, 0x6], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80c01) read$usbfs(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xd4, 0x8000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/227) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000300)=""/217) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000100)={0x2, &(0x7f0000000040)="4b1919ae033500221d22ec478b8d9b13275e7100e49dd8d943c6a208b86c34d9d705d49ffe25f10eb92872a236e15caa59d964d89cf6d790d02de204a101d4ed0fd47e1944bb2d5eb9209588459677b46f316f4c3c7822b1d6e3c330de563d35104f0818b4e2aa4fdd2b2fa39cc7b7c0a8729f51827468c3520c956c8ae45ec2e318dd46c082c80e57f0234ad6d4b60b"}) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80080, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) write$vhost_msg(r0, 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x3f6, 0x8, 0x74bd2f, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008804}, 0x40) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r3, &(0x7f0000000380)={0x1, {&(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000280)=""/220, 0x1, 0x2}}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000004c0)={0x0, &(0x7f0000000440)="0e8e7824de3c9487e6cfce9a568dda6ffec8ed2f2e5f3be9ce5f7058314dd49269677b2ae48aa9d43dcf272d123c4e8f2334c66c00e4df85a86358b8101e9959c4c10b578a1b92d1f36ded48db9e549198b93847c9e10a55d92c270891c308a8cfee8c457ebb12a8f97296c670"}) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401, 0x1000], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) 03:32:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'macsec0\x00'}) 03:32:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000005, 0x581000) read$usbfs(r0, 0x0, 0x0) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0xa1, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4, 0x401], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x1) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0xd}) 03:32:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x88042) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x3) [ 2157.026700] usb usb4: usbfs: process 31320 (syz-executor.1) did not claim interface 0 before use [ 2157.060455] usb usb4: usbfs: process 31330 (syz-executor.1) did not claim interface 0 before use 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000, 0x4], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x300, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x3ad800) read$usbfs(r0, 0x0, 0x0) 03:32:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x16, 0x9, 0x3}, {{0x0, 0x2710}, 0x2, 0x3ff, 0x3ff}, {{}, 0x15, 0x4, 0x6}, {{0x77359400}, 0x15, 0x40af, 0x5}, {{0x77359400}, 0x14, 0x7fff, 0x6}], 0x78) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0xc8042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6, 0x1000], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x40a, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x804) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) read$usbfs(r1, &(0x7f0000000200)=""/4096, 0x1000) 03:32:09 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000240)=0x20) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x2, 0x5, 0xe09, 0x4004, 0x923, 0x20}) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x5, 0x159081) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x8e, 0x129020) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000001c0)=""/109) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x454800, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x60, 0xe, 0x2, 0x8, 0x98, 0x7fffffff, &(0x7f0000000340)="fef30cef762249c6fa3f0d81cf41e7c28f786790c1afdefa24cca2f4ff90eb73c49fb4badfbe433a9d1b638c31d6a9b585c5ba8f14df8cdb693b51703c9a94b4d737f42593b06fa1d4b1a948d2ad151bc3f3828ef51d085ac9357511ee57cd251e9c946f8e1d1909b47eb699201a882bdbd07e244cbf09a2a07f4efb95fa69bc07441a7339f43bf29617ebbc46af90c19125c97c0c1d7118"}) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x800) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000280)=0x7ff) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f00000000c0)=0x2000) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x0}) [ 2157.194818] usb usb4: usbfs: process 31350 (syz-executor.1) did not claim interface 0 before use [ 2157.234689] usb usb4: usbfs: process 31353 (syz-executor.1) did not claim interface 0 before use 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0xc1, 0x0, 0xffffffff, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f, 0x0, 0x6], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000000c0)={0x1}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x1f) 03:32:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) read$usbfs(r0, 0x0, 0x0) 03:32:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaabf, 0x88042) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x3, 0x1000, 0x7, 0x6}, 'syz0\x00', 0x1c}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0xa}) 03:32:09 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$SIOCRSGCAUSE(r0, 0x8901, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0xa100, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5, 0x3f], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x9) 03:32:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) socket(0x4, 0x1, 0x800) 03:32:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x80200, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x0, 0x3}) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000240)=""/56, 0x38, &(0x7f0000000280)=""/173, 0x1, 0x2}}, 0x48) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x797, "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"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f00000000c0)=0xf8a0) bind$rose(r1, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000180)=""/69) 03:32:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7f, 0x141000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/4096) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000001080)=""/124) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r2, 0x0, 0x0) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0, 0x5], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0}) [ 2157.520130] usb usb4: usbfs: process 31395 (syz-executor.1) did not claim interface 0 before use 03:32:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000300)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x82000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00d6ff100000001832000002000000000000000000000018150000", @ANYRES32=0x1, @ANYBLOB="00000000000000000da2020000000000183b00000400"/32], &(0x7f0000000080)='GPL\x00', 0x800, 0xaa, &(0x7f00000000c0)=""/170, 0x41100, 0x4, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x3, 0x84b}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x7, 0x2dff}, 0x10}, 0x78) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000340)={0x8, @local}) 03:32:09 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000280)) write$vhost_msg(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0xa0f4a25181b55f5e, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8099) r5 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0xa}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semget(0x0, 0x4, 0x62) 03:32:09 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x81, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xd, 0x1}}, 0x1c, 0x5, &(0x7f0000000080)="b5fa84d6909e7a64af6fc3af200e2181fc20529cbf6af6fa825aa2fd"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) read$usbfs(r3, &(0x7f0000000100)=""/153, 0x99) write$vhost_msg(r2, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) write$vhost_msg(r1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff) read$usbfs(r1, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x3) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4, 0xffffffc0], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0}) [ 2157.673809] usb usb4: usbfs: process 31416 (syz-executor.1) did not claim interface 0 before use 03:32:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x4a84c2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)) read$usbfs(r0, &(0x7f0000000100)=""/14, 0xe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000008ce10010ed8e6b0c110f4d8ceb5e85ca26f2e24d817b12e4e6e0cb9bd377b16a558df901005e7cf69ef0d6530d7952e5b6f9cc25777441712f", @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf250c00000008003b000400000008003b004000000005002e000000000008003900ff0f0000"], 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x10) 03:32:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001, 0x4], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0}) 03:32:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg(r1, &(0x7f0000000140)={0x1, {&(0x7f0000000000)=""/236, 0xec, &(0x7f0000000100)=""/49, 0x2}}, 0x48) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 03:32:09 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101100) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) 03:32:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200088a0}, 0x844) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x8000, 0x0) 03:32:10 executing program 5: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000040)=""/4096, &(0x7f0000001080)=0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x36) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1, 0x8001], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0xa1, 0x0, 0x0, 0x0}) 03:32:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/4096) 03:32:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x30d500, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2, 0x4]) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x189042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:10 executing program 3: ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0xa8dc3) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9, 0x1], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2158.136798] usb usb4: usbfs: process 31473 (syz-executor.1) did not claim interface 0 before use 03:32:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x24440, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f00000002c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='page_pool_state_hold\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2040, 0x0) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbdc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @default, 0x0, [@remote, @remote, @netrom, @null, @netrom, @bcast]}, &(0x7f0000000000)=0x40, 0x80800) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x300, 0x0, 0x0, 0x0}) 03:32:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x72d8, "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"}) 03:32:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac5, 0x2c8000) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4, 0x9], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x4000, 0x0, 0x0, 0x0}) 03:32:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x40, 0x42101) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xf3, 0xc2e, &(0x7f0000000200)="b6bbad1eaa7a8766e9e2d92a2eb0e134b21ff017a92b2c0611c80c30cece1e5cd923060e1390a7a5fcad64c332661dba9d01fa9fa103ad28fe1b5dc4a25f102fc224e32fa1b604f59cd9c0c6f8a4cbab0346741aceafb1021ea3968e004d7bb911869786340d4f2ddb442a7c911a320340eec125517df9b8c5fc35cfdcf1a0412258986348dae1d8e0ffaa9bcb1717530b076d05d35b73f27cb6a2d48475237cb8584690803dc0491c4cda2665e6a5a53dcdc8b6c399520ba6655d13fa4140ed094ea1116181ca7a26b469a79eb30228787df8773f087f83d842ce150ef199089fd5cf295d55cbb04ba9f684733e58e9ae3cc2"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000000)=""/219) 03:32:10 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xe60, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x406100, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/67) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0xa, 0x1}) 03:32:10 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0xa100, 0x0, 0x0, 0x0}) 03:32:10 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x60203, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x88042) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x1) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9, 0x4], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) read$usbfs(r0, &(0x7f00000000c0)=""/8, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x400000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/111) 03:32:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0xfff) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000080)={0xe, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80400, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f0000000100)=0x5) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0]) socket$key(0xf, 0x3, 0x2) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4, 0x9], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x288040) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:10 executing program 2: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x486280) read$usbfs(r0, 0x0, 0x0) 03:32:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={[], 0x11}}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2158.568538] usb usb4: usbfs: process 31533 (syz-executor.1) did not claim interface 0 before use 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:32:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x240000) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) [ 2158.635822] usb usb4: usbfs: process 31533 (syz-executor.1) did not claim interface 0 before use 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [0x4], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0}) 03:32:10 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaabe, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) 03:32:10 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000000000000000000000000000000000000000000000000000000000000000000fff000000000000000"]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/120) 03:32:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x2908c0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x3}) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2, 0x8000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x46a042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x1870c0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x2, 0x0, {0x54, 0x3, 0x400, {0x9, 0x2}, {0x7, 0x1}, @cond=[{0x7, 0xf0fb, 0x80, 0xff83, 0x8, 0x113d}, {0x9, 0xfc50, 0xff, 0x81, 0x1000, 0x3}]}, {0x0, 0x400, 0x5, {0x2, 0x1f}, {0x5, 0xbb}, @ramp={0xf801, 0xfffc, {0x0, 0x81, 0x7, 0x7}}}}) 03:32:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0}) 03:32:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2, 0x2], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_rr_get_interval(r1, &(0x7f00000000c0)) 03:32:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffaf, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x2002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x80, 0x8c3cf47cb8dbf6b0, 0x4, 0x101, 0xd4, 0x9, &(0x7f0000000080)="c28391e92872e5a374192827f9ec81c8aa74f7056b5bbb1783556fbfaf70d625ec9f9644c030854544257798218a10928585de616e6ed007e7fdcc86ed78477520e5a96c2b03c5320470c9a43e77d97b2d165538b989f3d8581b03a69de52a390a813e0dc57f14114db656da86ecf423aefe070c7d67c33b854e72086b8b20f0211af3d521c990c415dd375c8e6c3ccfd69a20fc4351373eb3470b4407d62f3f019db8ec5d7b18a85aac039f0b36dbe7ca02def5ba4c7693a03b0c95d570e42d4496e13fb3c6d531db48381c224ac57e7954e726"}) pkey_alloc(0x0, 0x1) 03:32:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0xa1, 0x0, 0x0}) 03:32:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x7, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x40}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbf8, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4500) r2 = socket(0x11, 0x5, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0xa20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000881) 03:32:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200, 0x2], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x300, 0x0, 0x0}) 03:32:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x321480) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000080)={0x8, 0x1}) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa, 0x200], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:11 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2048c0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x60d, 0x0) socket(0x2b, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r1, 0x0, 0x0) 03:32:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x400000000000004, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x6, 0x3, "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"}) 03:32:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20040080) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x416139458af83038) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0}) 03:32:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df, 0xfffffffa], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:11 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0xfffffffffffffc49, 0x3b, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x845}, 0x20) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 03:32:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 03:32:11 executing program 5: r0 = shmget(0x1, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) shmctl$SHM_LOCK(r0, 0xb) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x80000000) 03:32:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7, 0x4df], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0xa100, 0x0, 0x0}) 03:32:11 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r1, 0x0, 0x0) [ 2159.799156] usb usb4: usbfs: process 31634 (syz-executor.1) did not claim interface 0 before use 03:32:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800000000aac2, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5, 0x7], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 5: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)=0x7) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)=0x14a9) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) 03:32:12 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x82842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x4b28c0) 03:32:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x6) 03:32:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x7, 0x3ff, 0x5e, 0x800}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0}) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000, 0x5], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2500, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc008ae09, &(0x7f0000000040)=ANY=[@ANYBLOB="0368f27e06a8bf45e753ad1107b406bec492b85daf7726df787a0beabf4d01000000af18cc09268540319ce96b30acd82e0632c4ad4d4beef9724f"]) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pkey_alloc(0x0, 0x0) 03:32:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0xc, 0x1}) 03:32:12 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000180)) [ 2160.099443] usb usb4: usbfs: process 31678 (syz-executor.1) did not claim interface 0 before use 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5, 0x80000000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0}) [ 2160.171052] usb usb4: usbfs: process 31678 (syz-executor.1) did not claim interface 0 before use 03:32:12 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x10042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x3, 0x18000) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000280)=[0x1, 0x7f]) write$vhost_msg(r1, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000000c0)=""/229, &(0x7f0000000200)=0xe5) write$vhost_msg(r0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x28000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xba, 0x40) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x412000, 0x0) read$usbfs(r3, 0x0, 0x0) 03:32:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac7, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x24000, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000001c0)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x800, 0x3}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000040)={0x80000001, 0x9, 0x77, 0x6, 0x7, 0x5}) 03:32:12 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x200000) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0xf, 0x0, 0x100, 0x0, 0x0, 0x0}) 03:32:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) r3 = accept4$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f00000000c0)=0x1c, 0x80800) ioctl$UI_DEV_DESTROY(r2, 0x5502) sendto$rose(r3, &(0x7f0000000100)="d8430b9ea6ddce5e36cba55cda969fe83d624727a8cf1fcaa650076b82809c18ee1c8e4f7f45", 0x26, 0x4000080, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@default, @bcast, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f, 0x5], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000080)={0x20, &(0x7f0000000000)="6cf5f156dd090170607687c2a37341f7e5a3ab2a63cf8a77a3a05a40ec9584a6a3a79873460f14dd3e4c5a6c990fe6011bcf12aaa793cbb284b11a11e43593a57ffcf65a692552e494e1679db80d9ed2c22b302dbd23d2e56e3519858688c720a772ae0f9eccdfa2dfb7a1f1fa6c3221c0313682c1632e806aebfc1eb3"}) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x0}) 03:32:12 executing program 5: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004081}, 0x40001) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x802c550a, &(0x7f0000001040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2160.339159] usb usb4: usbfs: process 31712 (syz-executor.1) did not claim interface 0 before use 03:32:12 executing program 3: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff, 0x3f], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2160.391292] usb usb4: usbfs: process 31712 (syz-executor.1) did not claim interface 0 before use 03:32:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x80080) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/18) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r1, 0x0, 0x0) 03:32:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80c40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='ext4_get_implied_cluster_alloc_exit\x00', r2}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:12 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x401, 0x980) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0xa1, 0x0}) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c, 0xfff], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x420000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x503142, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x874441, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7f) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x80000001, 0xfff, 0x0, 0x4, 0x5}) 03:32:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6, 0x400) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xc5, 0x2100) read$usbfs(r1, &(0x7f0000000080)=""/152, 0x98) 03:32:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'geneve0\x00'}) read$usbfs(r0, 0x0, 0x0) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x300, 0x0}) 03:32:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0xdd5ebd452674aad2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xa040, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000100)=0x8) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0)) r2 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x2, 0x701600) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000180)) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) write$evdev(r2, &(0x7f0000000100)=[{{}, 0x17, 0x8, 0x5}], 0x18) sched_rr_get_interval(r1, &(0x7f00000000c0)) r3 = syz_open_dev$char_raw(&(0x7f0000000140)='/dev/raw/raw#\x00', 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f00000001c0)=0x100000001) r4 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000180)) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2, 0x6c], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac5, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x4000, 0x0}) 03:32:12 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x10000) syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 03:32:12 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$vhost_msg(r2, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x804) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f0000000080)=0x9) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f, 0x2], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:12 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x402e00) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x2, 0xe, 0x0, 0x0, 0x0, 0xa, 0x0}) 03:32:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0xa100, 0x0}) 03:32:12 executing program 3: clock_getres(0x3, &(0x7f0000000000)) r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffff, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000180)) 03:32:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0xfd5144a0fc64e4f3) read$usbfs(r0, 0x0, 0x0) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535, 0x7f], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2160.889994] usb usb4: usbfs: process 31784 (syz-executor.1) did not claim interface 0 before use 03:32:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410002, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f00000000c0)=0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="f00000000c00000089808f8507800885060d8b026d6a4f929e9c1700f30880b6ecf8e99fba8209188b3fbef54f5800458f0c684b693dfcd814f59f7a5996c36c52f4fcb7235c37b9d0307b067154d5559823a4985ebc6e96e84ac717963a7b7203de5d27a7d35e430edf024adeff2d0bc06d1c"]) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x1800) read$usbfs(r1, &(0x7f0000000080)=""/133, 0x85) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2160.951464] usb usb4: usbfs: process 31796 (syz-executor.1) did not claim interface 0 before use 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x0}) 03:32:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xb8843, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x800) read$usbfs(r0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000180)={0x1000, &(0x7f0000000080)="7911061e7f99c7941e72e6c599f26238895dea039f6a90ee0c5e95551d9323dbf76d3518276709ce826d85cc69868c6a32392a57517128f6d04dd844ba1b3a6a115a7feda94b03685e0baee94aff8b2c12d233a62ee3c2cfaec845d505700512e6cba8005f3e334833477a2fe45751e2c866118ecc6ed8faf583e238e4124841b52202df78427b6e8047f5e63398aabea6fa29313ff762324221a1f3dec2657b8c565f4e7bedaa8c0c6f636cfef012dd149506b5aab3796b531e6206675bc41f09b32d6f2e00"/210}) 03:32:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x5, 0x6, 0x2, 0x484, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x40) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x535], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 03:32:13 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200400, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f00000000c0)={0x60, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) [ 2161.104209] usb usb4: usbfs: process 31813 (syz-executor.1) did not claim interface 0 before use 03:32:13 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6e, 0x40) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9097, 0x240) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x101800, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE64(r1, 0x80081272, &(0x7f0000000100)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000140)=0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffc, 0x88800) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f00000001c0)=0x80000000) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000000c0)=0xc67) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1, 0x8], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2161.148028] usb usb4: usbfs: process 31818 (syz-executor.1) did not claim interface 0 before use 03:32:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x1a1000) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) read$usbfs(r0, 0x0, 0x0) 03:32:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x401, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 03:32:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/15) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x4a8042) ioctl$USBDEVFS_CONTROL(r1, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r3 = socket(0x1e, 0xef35ddf097f86a92, 0xffffff7f) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000001e40)=""/4096, &(0x7f0000000080)=0x1000) 03:32:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000080c37a70edef0acd511e6500342a9901d5d18ac0d64cceff279516868613a2aa2519a39e455684e64", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25020000000800080001000000080002000100000008000800fcffffff08000100", @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24048011}, 0x4008040) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40, 0x1], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000080)=0x8, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x3, 0x105000) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000140)={0x1, 0x1}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0x7}) socket$inet_dccp(0x2, 0x6, 0x0) 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x3000000, 0x0}) 03:32:13 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf25010000000500330000000000060028000300000008003c0008000000050037000100000008000600", @ANYRES32=r2, @ANYBLOB="954ea26e", @ANYRES32=0x0, @ANYBLOB="05002e000100000005002f0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000014}, 0x20000801) r3 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r3, 0x0, 0x0) 03:32:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x10000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000080)=""/22) r1 = socket(0x1f, 0x80000, 0x7) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0xb1) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1, 0x0, 0x40], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000080)=0x5) 03:32:13 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0}) 03:32:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) r1 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000100)) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000000040)=0x100000000) read$usbfs(r0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x240, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f00000000c0)=0x9) 03:32:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x208000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3, 0x1], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x24) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffe1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000006000000cd12ba6508ec533789c339595cfe70fe694236af66e5e7ed16b7c1b7edbfcb25bef1ce80753029b27aee5f20005d9bedfbae98dc46d2c563ade3d39109f3b1e7a97a08cc5a878c85c1a7d727d8fa91"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1e3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf3da}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75, 0x3e633de3], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x20400) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000200)=""/249) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000300)={0x1, 0x75, 0x2f, 0x5f, 0x8, 0x5}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x569e, 0xe, [{0xa, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0xf}, {0xd}, {0x6}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0xa, 0x1}, {0xb, 0x1}, {0xa}, {0xf, 0x1}, {0x1, 0x1}]}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x1, 0x5, 0x200, 0x8, 0x9f, 0x14000000, &(0x7f00000000c0)="6732aac5d92253a99f719aef218763bd8cf7c7d831fd2e41b722b61c4980ff71a57bb662c78e993c67578e544f978cb2693c1c7f36ec8a9ceefdb15da1bdff3d876a20c7b182533c060e0ce325a38768ad5f95626524304a21afdd850cc9966e425953f7e2c3504f0cc284b82ddf463beaf297c7b53a60a50d181b89abfdbd52bda14129ae10697604796fadabc662b1142fdfa5e5d32f775e9b5b5aee2262"}) 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0xa1000000, 0x0}) 03:32:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x0, r0, 0x800, 0x80000}) ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000140)) read$usbfs(r0, 0x0, 0x0) syz_open_dev$char_raw(&(0x7f0000000180)='/dev/raw/raw#\x00', 0x0, 0x410041) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000000)={0x7, "12e8736b6806e0e1f2878739289e88177a7bb4aba6f6846c5eee94d28aca579430fa0fa910f8d410ed46cfc5a4b0652440d2efe91f3d34a07f02ab50ce825096df6d0a5d66695282925f8a8d7879223167a5daf4733374bd22f0755f8a2daf55d14ccf8f0ba0af3f087536dcab3d53fbce4ecf5f46b83539c910cf6ad899d7091f196a6413b9d40b4e0b23e2c74a8df4be1327b5eeca23af7bff889ee304a22106681c29cb36bff3c789eba1b658de1b5fcd31860415233ca7a4bd8b22f48ca458d354874a78ea9e3e903dbd312e9e6de5f86c6f819419d3f88bedc41aed4d124ea0c548ff595f2d2f0f15ab7810ac521b2d1b815bc4c1ee0d3b4559d69f4944"}) r1 = syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0xd32, 0x3ef101) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000280)={0x32a5, 0xc, [{0x5}, {0x3, 0x1}, {}, {0xa}, {0xb}, {0x9, 0x1}, {0x4}, {0xe, 0x1}, {0x9}, {0xc}, {0xc}, {0xb}]}) 03:32:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) [ 2161.682455] usb usb4: usbfs: process 31884 (syz-executor.1) did not claim interface 0 before use 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001, 0x0, 0x7e75], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) [ 2161.744913] usb usb4: usbfs: process 31894 (syz-executor.1) did not claim interface 0 before use 03:32:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x8, 0x0, 0x33, 0x0}) 03:32:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200000000000003, 0x13be80) read$usbfs(r0, 0x0, 0x0) 03:32:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6a, 0x4000) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 03:32:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f, 0x0, 0x8001], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000080)={0x44, "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"}) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x131402, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000200)={0x2, r3}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000aac2, 0x585066) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) 03:32:14 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/82, 0x52, &(0x7f00000000c0)=""/238, 0x2, 0x2}}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@bcast, @bcast, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) read$usbfs(r0, 0x0, 0x0) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff, 0x98f], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000040)={0x2, "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"}) [ 2161.969422] usb usb4: usbfs: process 31922 (syz-executor.1) did not claim interface 0 before use 03:32:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:32:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9, 0xff], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x242103) read$usbfs(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 03:32:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) sched_rr_get_interval(0x0, &(0x7f0000000040)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000001380)={0x2, 0x0, {&(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001340)=""/29, 0x3, 0x4}}, 0x48) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x43}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa344}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffc0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000300)=0x4) write$vhost_msg(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000100)={0x40, 0xc, 0x4, 0xe9fa, 0x4d, 0xffffffc1, &(0x7f0000000080)="177201a1406bd10d9bff642d647ea2391b612b2ce82a3b1576bdc0a84eca7371010957f4422aa0dc43137e6e4d5ff5e53e02944a068b241f11436b16a48d71953ad12ed13e21bb96213e8383c9"}) getsockopt$inet_dccp_int(r2, 0x21, 0x1, &(0x7f0000001400), &(0x7f0000001440)=0x4) 03:32:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x8400) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x4, 0x13, 0x6, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000, 0x9], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2162.167389] usb usb4: usbfs: process 31944 (syz-executor.1) did not claim interface 0 before use 03:32:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) 03:32:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x632266) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0}) r1 = syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x104000) ioctl$CHAR_RAW_ALIGNOFF(r1, 0x127a, &(0x7f0000000080)) 03:32:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xe) 03:32:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x303700) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000080)=""/82) 03:32:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0xa9da, 0x15, [{0xc}, {0xd, 0x1}, {0x5, 0x1}, {0xc}, {0x3, 0x1}, {0x3}, {0xf, 0x1}, {0x4, 0x1}, {0xc}, {0x0, 0x1}, {0x3}, {0x4}, {0xc, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0xf, 0x1}, {0x1}, {0xa, 0x1}]}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x31, 0x4, 0x6, 0x0, 0x0, 0x0}) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff, 0x10000], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:14 executing program 5: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000080)={0x6, 0xfffff84f, 0x8, 0x4, 0xdfc, 0x4}) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x204840, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000100)={0x6}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xfffffffffffffff8) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f00000000c0)={0xa}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x5) 03:32:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x88a00) read$usbfs(r0, 0x0, 0x0) 03:32:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8da, 0x84280) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x0, 0xd, 0x1, 0x6, 0x78, 0x5, &(0x7f0000000080)="c132a6b7bc009cd4d6150e8c2a96e15818b69d9d643fe6fc8075e86777203f749a25d887dac21a97e6686605dc6c1ea54819fd217c176e0c403e0cc3a2ebe1e8c554b979dc8e8405f1f3a80b7bc056e3b562f934a35059680e9c76374680fa92bd97ed38a36c49b51119fd994923a5c23363d6c4b8d30ab0"}) 03:32:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0}) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5, 0x7fff], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x800, 0x252000) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000140)=0xaf) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x6, 0x1) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0xfd, 0x3ff, 0x3, 0xffffffff, 0x7, 0x80}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000001c0)={0x1, 0x0, 0x7fff, 0x5, 0x10001, 0x7f}) 03:32:14 executing program 5: ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'ip6_vti0\x00'}) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2800, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x6, 0x2000, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1002) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0xf}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x1, 0x6, 0x6, 0x80800, r1}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000140)=0x4) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) write$vhost_msg(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x2, r1}) 03:32:14 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={r1, 0x2, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000180)) 03:32:14 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x501000) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800, 0x5], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2162.521344] usb usb4: usbfs: process 31998 (syz-executor.1) did not claim interface 0 before use [ 2162.553787] usb usb4: usbfs: process 31998 (syz-executor.1) did not claim interface 0 before use 03:32:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2000000aac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x200040) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000080)=0x8000) 03:32:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) 03:32:14 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xc100, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000001c0)={{{0xb}}, 0x87, 0x101, &(0x7f0000000100)="823e8fe4f9fd1e8754a5d284a157539a1d8543923a90b55bfe2307410d08fe85d7e8d2589be8408e33115b61837ebe38af28b9e2c7bd758af31d854fea6c1f881d375999a29962abf08de1967214ebaaf8e2bbec523ad6a4695c69ccbbdcf94092bd0cbbdc1098456f7fdabc2046c28377f71c627e5552dbe94e908fac2315ced66dab897a0bdb"}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x80e42, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000200)={0xc, 0x4, 0x4db6}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x9) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0xa8042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x100) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8, 0x800], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0xc4000) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80200, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x401, 0x400800) read$usbfs(r0, 0x0, 0x0) 03:32:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) [ 2162.738411] usb usb4: usbfs: process 32026 (syz-executor.1) did not claim interface 0 before use 03:32:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80, 0x88042) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x400) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x88042) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x8, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040000) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x44300) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000300)) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x0, 0xb, 0x0, 0x3, 0x0, 0x0, 0x0}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000200)={0x4, {0x2, 0x10000, 0x8, 0x6, 0x6, 0x8}}) r3 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x400440) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f00000000c0)={0x800, "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"}) r4 = syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x9, 0x60001) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000280)={0x1}) 03:32:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000b, 0xffffffffffffffff) write$vhost_msg(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008014}, 0x20004044) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000180)) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000140)={0x5, 0x800}) 03:32:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) read$usbfs(r0, 0x0, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/40) 03:32:15 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x77a7, 0x44801) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0xc879, 0xfff]) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r2, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @null, @rose={'rose', 0x0}, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) 03:32:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6, 0xffffffff], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x7) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x4100) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0xb}) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000140)={0x7, &(0x7f00000000c0)="69ca40899895659ae5201ab9f2a53917f57b6448a3d91ceeed21d81aaac228463aa1ffb8d9543cb26133ee8ed254dae48cc746fa23fd2ccc55c8837ffd32f6f7a12d4be58d42d6f186cd9e89b0590ab146efc9984aa71a"}) 03:32:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffffffffffd71, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc93da0d374db3a58}, 0x4) 03:32:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3, 0x6], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000040)={0x1, "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"}) 03:32:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) [ 2163.072834] usb usb4: usbfs: process 32071 (syz-executor.1) did not claim interface 0 before use [ 2163.098623] usb usb4: usbfs: process 32072 (syz-executor.1) did not claim interface 0 before use 03:32:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 03:32:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8, 0x3], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xcca, 0x10400) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1c000) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x32, 0x1]) 03:32:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1, 0x7, 0x20, 0x6b}, {0xcb17, 0x7f, 0x6}, {0xfff9, 0x8d, 0x7, 0x1}, {0x1000, 0x20, 0x20, 0xf59}, {0x8001, 0x3, 0x1, 0x66d}, {0x6, 0x81, 0x9, 0x1}, {0x26, 0x5, 0x80, 0xda2}]}) 03:32:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x181003) read$usbfs(r0, 0x0, 0x0) [ 2163.236553] usb usb4: usbfs: process 32092 (syz-executor.1) did not claim interface 0 before use [ 2163.265885] usb usb4: usbfs: process 32097 (syz-executor.1) did not claim interface 0 before use 03:32:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8, 0x8], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) ioctl$CHAR_RAW_RAGET(r1, 0x1263, &(0x7f00000001c0)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0xdf, 0xfffffffb, &(0x7f0000000040)="c00a9ee1b5c3b4100184abb6b9dcd11c14e56294a2a0a3d4c5e5641a5b970598672598138570118fdf7dc1cd16cf651d340a60c87fabd8e66676056d868ea974a43796cc898b2e782a13c59537425c0bbabc78db356726ccf7af48c345d9521b590b56c51f2d83d707d0ee737e0611b0c6167c38eed5d4043d48f6eb41cf930550180adb3e69c15739fe4786330ef43065b2e9f41fe8a0289dcb20bab33636019dd27740db178b7fecc48bd30ed03a4e587edbed88d06704be4800b784ce290cf21e55a8edc7a9e06fe35c6d2a0a7af24f73d1a38cf616bb0d431c22ecfd80"}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000180)) ioctl$CHAR_RAW_GETSIZE64(r1, 0x80081272, &(0x7f0000000200)) 03:32:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x81, 0x200000) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r3, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x3d) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x10000}) 03:32:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0xffffffed) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x40, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r1, 0x0, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20042004) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000000340)={0x1, {&(0x7f00000001c0)=""/109, 0x6d, &(0x7f0000000240)=""/249, 0x1, 0x2}}, 0x48) 03:32:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4d7, 0x1a3001) read$usbfs(r0, 0x0, 0x0) 03:32:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x5, 0x105802) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x1f]) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100, 0x80000) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r3, 0x0) getpgrp(r3) syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x100, 0x200040) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x60, 0x14, 0xfffe, 0x6, 0xfd, 0xfffffffd, &(0x7f0000000080)="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"}) 03:32:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5, 0x8], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) 03:32:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a1000) read$usbfs(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xff, 0x1000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000040)={0x1f, 0x1, "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"}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000180)={0x5, 0x1}) [ 2163.465183] usb usb4: usbfs: process 32121 (syz-executor.1) did not claim interface 0 before use 03:32:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000001040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40002) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000140)=0x1) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x7) 03:32:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x47b2f50c, 0x204a81) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:32:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x23, 0x1a1000) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1f, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x6, [@bcast, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) read$usbfs(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000180)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x440800, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000240)={0x3, 0x3, 0x100, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0xa, 0x3, 0x1, 0x84800, r3}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/hwrng\x00', 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000080)) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000040)={0xd, 0x5, 0x0, 0x4, 0x6, 0xff}) 03:32:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [], [], [0x7, 0xfff, 0x5, 0x9, 0x200, 0x705e, 0xfffffff8, 0x8, 0x80, 0x800, 0x1, 0x4, 0x2, 0xfffffffa, 0x8, 0x1, 0x40004000, 0xfff, 0xffff, 0x1000, 0xffffffff, 0x5ea, 0xffffe0fc, 0xa4ac, 0x5], [0x8001, 0x2, 0x7, 0x0, 0x7fff, 0x36, 0x8, 0x6, 0x2, 0x9, 0x40, 0x1ff, 0xdc, 0x9, 0xfff, 0x0, 0x1, 0x80000000, 0x4e4b, 0x7, 0x4, 0x7, 0x101, 0xffff0fd2, 0x119, 0x1, 0x5, 0x3ff, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x63, 0x7, 0x7, 0x5, 0xb1, 0x0, 0x80000001, 0x53504f94, 0x80000000, 0x6255, 0x0, 0x24, 0x5, 0x3, 0x101, 0x3, 0x1, 0x7fff, 0x5, 0x8, 0x1, 0x3f, 0x5e65, 0x10000, 0x3, 0x2, 0x1, 0x4]}, 0x45c) [ 2163.514797] usb usb4: usbfs: process 32124 (syz-executor.3) did not claim interface 0 before use [ 2163.539954] usb usb4: usbfs: process 32121 (syz-executor.1) did not claim interface 0 before use 03:32:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xaac2, 0x88042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) [ 2163.667042] usb usb4: usbfs: process 32149 (syz-executor.1) did not claim interface 0 before use [ 2164.258963] usb usb4: usbfs: process 32154 (syz-executor.3) did not claim interface 0 before use [ 2321.197593] INFO: task syz-executor.3:32124 blocked for more than 140 seconds. [ 2321.204984] Not tainted 4.19.160-syzkaller #0 [ 2321.210768] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2321.221543] syz-executor.3 D28256 32124 8100 0x00000004 [ 2321.227173] Call Trace: [ 2321.229920] __schedule+0x887/0x2040 [ 2321.233669] ? io_schedule_timeout+0x140/0x140 [ 2321.238349] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2321.243460] schedule+0x8d/0x1b0 [ 2321.246865] schedule_timeout+0x4cf/0xfe0 [ 2321.251079] ? usleep_range+0x170/0x170 [ 2321.255047] ? wait_for_common+0x294/0x470 [ 2321.259340] ? collect_expired_timers+0x2a0/0x2a0 [ 2321.264187] ? _raw_spin_unlock_irq+0x24/0x80 [ 2321.268780] wait_for_common+0x29c/0x470 [ 2321.272900] ? bit_wait_io_timeout+0x100/0x100 [ 2321.277566] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2321.282678] ? wake_up_q+0xe0/0xe0 [ 2321.286213] ? usb_submit_urb+0xb37/0x13b0 [ 2321.290531] usb_start_wait_urb+0x14b/0x4c0 [ 2321.294849] ? setup_fault_attr+0x200/0x200 [ 2321.299230] ? lock_acquire+0x170/0x3c0 [ 2321.303238] ? usb_api_blocking_completion+0xa0/0xa0 [ 2321.308418] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2321.313432] ? memset+0x20/0x40 [ 2321.316697] usb_bulk_msg+0x226/0x550 [ 2321.320561] proc_bulk+0x3de/0x860 [ 2321.324097] ? proc_control+0x7f0/0x7f0 [ 2321.328148] ? futex_wait_setup+0x300/0x300 [ 2321.332473] usbdev_do_ioctl+0x696/0x3030 [ 2321.336614] ? futex_wake+0x159/0x480 [ 2321.340475] ? proc_bulk+0x860/0x860 [ 2321.344184] ? __lock_acquire+0x6de/0x3ff0 [ 2321.348494] ? mark_held_locks+0xf0/0xf0 [ 2321.352548] ? do_futex+0x163/0x1c70 [ 2321.356242] ? mark_held_locks+0xf0/0xf0 [ 2321.360409] ? mark_held_locks+0xf0/0xf0 [ 2321.364470] ? debug_check_no_obj_freed+0x201/0x482 [ 2321.369569] ? __fget+0x32f/0x510 [ 2321.373023] ? __might_fault+0x11f/0x1d0 [ 2321.377101] ? usbdev_compat_ioctl+0x30/0x30 [ 2321.381573] usbdev_ioctl+0x21/0x30 [ 2321.385205] do_vfs_ioctl+0xcdb/0x12e0 [ 2321.389326] ? lock_downgrade+0x720/0x720 [ 2321.393482] ? check_preemption_disabled+0x41/0x280 [ 2321.398561] ? ioctl_preallocate+0x200/0x200 [ 2321.402967] ? __fget+0x356/0x510 [ 2321.406402] ? do_dup2+0x450/0x450 [ 2321.410011] ksys_ioctl+0x9b/0xc0 [ 2321.413513] __x64_sys_ioctl+0x6f/0xb0 [ 2321.417451] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2321.422039] do_syscall_64+0xf9/0x620 [ 2321.425830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2321.431107] RIP: 0033:0x45deb9 [ 2321.434299] Code: Bad RIP value. [ 2321.437714] RSP: 002b:00007f813d7dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2321.445413] RAX: ffffffffffffffda RBX: 000000000001af40 RCX: 000000000045deb9 [ 2321.452741] RDX: 0000000020000140 RSI: 00000000c0185502 RDI: 0000000000000003 [ 2321.460075] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2321.467414] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2321.474684] R13: 00007ffd367fd17f R14: 00007f813d7df9c0 R15: 000000000118bf2c [ 2321.482044] [ 2321.482044] Showing all locks held in the system: [ 2321.489188] 1 lock held by khungtaskd/1566: [ 2321.493501] #0: 00000000765cedb1 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 2321.502185] 1 lock held by in:imklog/7793: [ 2321.506408] #0: 00000000461e3de7 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 2321.514458] [ 2321.516077] ============================================= [ 2321.516077] [ 2321.523135] NMI backtrace for cpu 1 [ 2321.526775] CPU: 1 PID: 1566 Comm: khungtaskd Not tainted 4.19.160-syzkaller #0 [ 2321.534198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.543641] Call Trace: [ 2321.546213] dump_stack+0x1fc/0x2fe [ 2321.549821] nmi_cpu_backtrace.cold+0x63/0xa2 [ 2321.554296] ? lapic_can_unplug_cpu.cold+0x39/0x39 [ 2321.559217] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 2321.564484] watchdog+0x991/0xe60 [ 2321.567922] ? reset_hung_task_detector+0x30/0x30 [ 2321.572743] kthread+0x33f/0x460 [ 2321.576084] ? kthread_park+0x180/0x180 [ 2321.580050] ret_from_fork+0x24/0x30 [ 2321.583855] Sending NMI from CPU 1 to CPUs 0: [ 2321.588803] NMI backtrace for cpu 0 [ 2321.588809] CPU: 0 PID: 10 Comm: rcu_preempt Not tainted 4.19.160-syzkaller #0 [ 2321.588815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.588819] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 2321.588829] Code: 48 c7 c7 80 ff 6d 88 4c 89 25 ec 39 bf 0b 41 bc f4 ff ff ff e8 a0 f9 ea ff 48 c7 05 d6 39 bf 0b 00 00 00 00 e9 39 ec ff ff 90 <48> 8b 34 24 65 48 8b 04 25 80 df 01 00 65 8b 15 0c 0f 9d 7e 81 e2 [ 2321.588833] RSP: 0018:ffff8880b5a77bf0 EFLAGS: 00000046 [ 2321.588841] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816a066d [ 2321.588846] RDX: 0000000000000000 RSI: ffff8880b5a62280 RDI: 0000000000000005 [ 2321.588851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2321.588856] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000293 [ 2321.588860] R13: 1ffff11016b4ef8e R14: ffff8880ba022b00 R15: 00000000ffffffff [ 2321.588865] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 2321.588870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2321.588875] CR2: 00007fa2fd9bc000 CR3: 00000000a18dc000 CR4: 00000000001406f0 [ 2321.588880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2321.588885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2321.588887] Call Trace: [ 2321.588891] trace_hardirqs_off+0x26/0x200 [ 2321.588894] del_timer_sync+0x86/0x270 [ 2321.588897] schedule_timeout+0x4d7/0xfe0 [ 2321.588901] ? prepare_to_swait_event+0x5b/0x540 [ 2321.588904] ? usleep_range+0x170/0x170 [ 2321.588908] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2321.588912] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2321.588916] ? collect_expired_timers+0x2a0/0x2a0 [ 2321.588919] ? swake_up_all+0x340/0x340 [ 2321.588922] rcu_gp_kthread+0xdad/0x21c0 [ 2321.588925] ? lock_acquire+0x170/0x3c0 [ 2321.588929] ? __rcu_read_unlock+0x160/0x160 [ 2321.588933] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2321.588937] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2321.588940] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2321.588944] ? __kthread_parkme+0x133/0x1e0 [ 2321.588947] ? __rcu_read_unlock+0x160/0x160 [ 2321.588950] kthread+0x33f/0x460 [ 2321.588954] ? kthread_park+0x180/0x180 [ 2321.588957] ret_from_fork+0x24/0x30 [ 2321.589399] Kernel panic - not syncing: hung_task: blocked tasks [ 2321.805841] CPU: 1 PID: 1566 Comm: khungtaskd Not tainted 4.19.160-syzkaller #0 [ 2321.813266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.822600] Call Trace: [ 2321.825175] dump_stack+0x1fc/0x2fe [ 2321.828807] panic+0x26a/0x50e [ 2321.831988] ? __warn_printk+0xf3/0xf3 [ 2321.835855] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2321.840947] ? cpumask_next+0x3c/0x40 [ 2321.844727] ? printk_safe_flush+0xd6/0x120 [ 2321.849035] ? watchdog+0x991/0xe60 [ 2321.852651] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 2321.858099] watchdog+0x9a2/0xe60 [ 2321.861533] ? reset_hung_task_detector+0x30/0x30 [ 2321.866355] kthread+0x33f/0x460 [ 2321.869709] ? kthread_park+0x180/0x180 [ 2321.873672] ret_from_fork+0x24/0x30 [ 2321.878202] Kernel Offset: disabled [ 2321.881836] Rebooting in 86400 seconds..