) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:37 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:37 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:37 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000007e1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1429.050548][ T2377] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1429.091923][ T2377] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1429.183288][T28668] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1429.198025][T28676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1429.213134][T28668] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1429.224458][T28676] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 13:01:37 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1429.320599][ T2377] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1429.329770][ T2377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:01:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1429.413719][ T2377] usb 1-1: Product: syz [ 1429.432668][ T2377] usb 1-1: Manufacturer: syz [ 1429.452591][ T2377] usb 1-1: SerialNumber: syz [ 1429.453916][T28690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1429.518825][T28690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1429.521381][ T2377] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:01:38 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1429.560331][T27197] usb 4-1: new high-speed USB device number 38 using dummy_hcd 13:01:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000200000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:38 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1429.657835][T28696] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1429.686618][T28696] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1429.850515][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1430.180492][ T2377] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1430.190540][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1430.203626][ T2377] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1430.212659][ T2377] usb 1-1: ath9k_htc: USB layer deinitialized [ 1430.225653][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.244574][T27197] usb 4-1: Product: syz [ 1430.248926][T27197] usb 4-1: Manufacturer: syz [ 1430.263379][T27197] usb 4-1: SerialNumber: syz [ 1430.288782][T27197] usb 4-1: config 0 descriptor?? [ 1430.540238][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1430.597424][ T2377] usb 1-1: USB disconnect, device number 28 13:01:39 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e2000000000010000000000db00"}) r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1431.157428][T28736] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1431.165878][T28736] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1431.470088][T27691] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1431.860347][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1431.870644][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1432.060173][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1432.069397][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.079553][T27691] usb 1-1: Product: syz [ 1432.084668][T27691] usb 1-1: Manufacturer: syz [ 1432.089281][T27691] usb 1-1: SerialNumber: syz [ 1432.161338][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1432.530083][T27197] usb write operation failed. (-71) [ 1432.553647][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1432.564789][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1432.578400][T27197] usb 4-1: media controller created [ 1432.600153][T27197] usb read operation failed. (-71) [ 1432.622800][T27197] usb write operation failed. (-71) [ 1432.631288][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1432.650592][T27197] usb 4-1: USB disconnect, device number 38 13:01:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000300000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:41 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1432.820285][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1432.854200][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1432.897284][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1432.952815][T28778] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 13:01:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000400000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1432.997688][T28778] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:01:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1433.200189][T27197] usb 4-1: new high-speed USB device number 39 using dummy_hcd 13:01:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1433.259041][T27691] usb 1-1: USB disconnect, device number 29 [ 1433.373112][T28810] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1433.418473][T28810] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1433.450177][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1433.730396][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1433.744202][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.755899][T27197] usb 4-1: Product: syz [ 1433.761746][T27197] usb 4-1: Manufacturer: syz [ 1433.766561][T27197] usb 4-1: SerialNumber: syz [ 1433.776732][T27197] usb 4-1: config 0 descriptor?? 13:01:42 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e2000000000010000000000db00"}) r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000500000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1434.030037][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1434.150025][T27691] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1434.521902][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1434.532241][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1434.710022][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1434.719251][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.728022][T27691] usb 1-1: Product: syz [ 1434.734701][T27691] usb 1-1: Manufacturer: syz [ 1434.739399][T27691] usb 1-1: SerialNumber: syz [ 1434.790949][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1435.360000][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1435.369611][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1435.384865][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1436.080054][T27197] usb write operation failed. (-71) [ 1436.093522][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1436.105341][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1436.115083][T27197] usb 4-1: media controller created [ 1436.140016][T27197] usb read operation failed. (-71) [ 1436.160052][T27197] usb write operation failed. (-71) [ 1436.162067][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1436.186411][T27197] usb 4-1: USB disconnect, device number 39 13:01:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:44 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:44 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:44 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000600000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1436.437671][T28878] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1436.460575][T28878] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:01:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:45 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000700000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1436.789994][T27197] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1436.813110][T28896] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 13:01:45 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1436.857530][T28896] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:01:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1437.039921][T27197] usb 4-1: Using ep0 maxpacket: 8 13:01:45 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000800000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1437.169643][T28914] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1437.178400][T28914] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1437.194222][T27691] usb 1-1: USB disconnect, device number 30 [ 1437.370523][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1437.383057][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.414832][T27197] usb 4-1: Product: syz [ 1437.429408][T27197] usb 4-1: Manufacturer: syz [ 1437.464748][T27197] usb 4-1: SerialNumber: syz [ 1437.509311][T27197] usb 4-1: config 0 descriptor?? [ 1437.789997][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1439.819729][T27197] usb write operation failed. (-71) [ 1439.826712][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1439.843146][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1439.853832][T27197] usb 4-1: media controller created [ 1439.869721][T27197] usb read operation failed. (-71) [ 1439.899710][T27197] usb write operation failed. (-71) [ 1439.906656][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1439.919445][T27197] usb 4-1: USB disconnect, device number 40 13:01:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:48 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e2000000000010000000000db00"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:01:48 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000900000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:48 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1440.151610][T28960] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1440.181740][T28960] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:01:48 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000c00000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1440.429720][ T8560] usb 4-1: new high-speed USB device number 41 using dummy_hcd 13:01:48 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1440.546885][T28985] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1440.591729][T28985] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:01:49 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e2000000000010000000000db00"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1440.640882][T28993] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1440.680100][ T8560] usb 4-1: Using ep0 maxpacket: 8 13:01:49 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1440.980029][ T8560] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1440.999619][ T8560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.007658][ T8560] usb 4-1: Product: syz [ 1441.050058][ T8560] usb 4-1: Manufacturer: syz [ 1441.058331][ T8560] usb 4-1: SerialNumber: syz [ 1441.081861][ T8560] usb 4-1: config 0 descriptor?? [ 1441.349809][ T8560] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1443.359675][ T8560] usb write operation failed. (-71) [ 1443.372411][ T8560] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1443.384409][ T8560] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1443.396660][ T8560] usb 4-1: media controller created [ 1443.429630][ T8560] usb read operation failed. (-71) [ 1443.449678][ T8560] usb write operation failed. (-71) [ 1443.457826][ T8560] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1443.474612][ T8560] usb 4-1: USB disconnect, device number 41 13:01:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:52 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000f00000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:52 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:52 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e2000000000010000000000db00"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1443.756275][T29041] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 13:01:52 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1443.802476][T29041] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1443.869248][T29054] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:01:52 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000004100000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1444.029626][ T8560] usb 4-1: new high-speed USB device number 42 using dummy_hcd 13:01:52 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:52 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1444.215845][T29067] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1444.252217][T29067] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1444.309768][ T8560] usb 4-1: Using ep0 maxpacket: 8 13:01:52 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1444.380545][T29076] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1444.609895][ T8560] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1444.624226][ T8560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.641506][ T8560] usb 4-1: Product: syz [ 1444.651404][ T8560] usb 4-1: Manufacturer: syz [ 1444.656173][ T8560] usb 4-1: SerialNumber: syz [ 1444.671399][ T8560] usb 4-1: config 0 descriptor?? [ 1444.679553][ T20] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1444.939754][ T8560] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1445.050352][ T20] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1445.060675][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1445.229501][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1445.239068][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.248958][ T20] usb 1-1: Product: syz [ 1445.254559][ T20] usb 1-1: Manufacturer: syz [ 1445.259173][ T20] usb 1-1: SerialNumber: syz [ 1445.300315][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1445.879545][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1445.888958][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1445.903657][ T20] usb 1-1: ath9k_htc: USB layer deinitialized [ 1446.959625][ T8560] usb write operation failed. (-71) [ 1446.972216][ T8560] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1446.984236][ T8560] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1446.993262][ T8560] usb 4-1: media controller created [ 1447.029417][ T8560] usb read operation failed. (-71) [ 1447.049648][ T8560] usb write operation failed. (-71) [ 1447.062395][ T8560] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1447.073150][ T8560] usb 4-1: USB disconnect, device number 42 13:01:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:55 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000006000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:55 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:55 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000003000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:56 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1447.699363][ T8560] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1447.764272][T27691] usb 1-1: USB disconnect, device number 31 13:01:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:56 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:56 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000005000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1448.010196][ T8560] usb 4-1: Using ep0 maxpacket: 8 [ 1448.339569][ T8560] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1448.348736][ T8560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.358719][ T8560] usb 4-1: Product: syz [ 1448.364151][ T8560] usb 4-1: Manufacturer: syz [ 1448.368768][ T8560] usb 4-1: SerialNumber: syz [ 1448.378916][ T8560] usb 4-1: config 0 descriptor?? [ 1448.659468][ T8560] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1450.689194][ T8560] usb write operation failed. (-71) [ 1450.695926][ T8560] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1450.720398][ T8560] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1450.731481][ T8560] usb 4-1: media controller created [ 1450.749302][ T8560] usb read operation failed. (-71) [ 1450.769245][ T8560] usb write operation failed. (-71) [ 1450.776815][ T8560] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1450.796940][ T8560] usb 4-1: USB disconnect, device number 43 13:01:59 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:01:59 executing program 4: syz_io_uring_setup(0x187, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:01:59 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:59 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000006000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:59 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1451.102935][T29219] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1451.137851][T29219] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:01:59 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:01:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1451.319227][ T8560] usb 4-1: new high-speed USB device number 44 using dummy_hcd 13:01:59 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000007000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:01:59 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1451.478788][T29243] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 13:02:00 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1451.542264][T29243] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1451.569108][ T8560] usb 4-1: Using ep0 maxpacket: 8 13:02:00 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1451.849587][ T8560] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1451.858844][ T8560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.902988][ T8560] usb 4-1: Product: syz [ 1451.912637][ T8560] usb 4-1: Manufacturer: syz [ 1451.917462][ T8560] usb 4-1: SerialNumber: syz [ 1451.942624][ T8560] usb 4-1: config 0 descriptor?? [ 1452.209238][ T8560] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1454.209111][ T8560] usb write operation failed. (-71) [ 1454.222217][ T8560] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1454.233375][ T8560] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1454.246874][ T8560] usb 4-1: media controller created [ 1454.271146][ T8560] usb read operation failed. (-71) [ 1454.289147][ T8560] usb write operation failed. (-71) [ 1454.297143][ T8560] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1454.318045][ T8560] usb 4-1: USB disconnect, device number 44 13:02:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000009000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:02 executing program 4: syz_io_uring_setup(0x187, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:02 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:02 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1454.579602][T29298] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1454.602498][T29298] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:03 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000430b000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1454.800000][ T902] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1454.819306][ T20] usb 4-1: new high-speed USB device number 45 using dummy_hcd 13:02:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1454.936995][T29320] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1454.965571][T29320] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1455.000115][T29328] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1455.069175][ T20] usb 4-1: Using ep0 maxpacket: 8 13:02:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1455.160829][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1455.186628][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1455.330926][T29341] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1455.339520][T29341] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1455.350753][T29341] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1455.399342][ T20] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1455.408414][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.418701][ T20] usb 4-1: Product: syz [ 1455.430423][ T20] usb 4-1: Manufacturer: syz [ 1455.435041][ T20] usb 4-1: SerialNumber: syz [ 1455.448992][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1455.458077][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.469715][ T902] usb 1-1: Product: syz [ 1455.473992][ T902] usb 1-1: Manufacturer: syz [ 1455.480106][ T20] usb 4-1: config 0 descriptor?? [ 1455.499485][ T902] usb 1-1: SerialNumber: syz [ 1455.540049][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1455.739014][ T20] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1456.119038][ T902] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1456.128582][ T902] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1456.137978][ T902] usb 1-1: ath9k_htc: USB layer deinitialized [ 1456.541452][ T902] usb 1-1: USB disconnect, device number 32 [ 1457.788819][ T20] usb write operation failed. (-71) [ 1457.801786][ T20] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1457.822048][ T20] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1457.836881][ T20] usb 4-1: media controller created [ 1457.868972][ T20] usb read operation failed. (-71) [ 1457.888923][ T20] usb write operation failed. (-71) [ 1457.895877][ T20] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1457.908256][ T20] usb 4-1: USB disconnect, device number 45 13:02:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:06 executing program 4: syz_io_uring_setup(0x187, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:06 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:06 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000c000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:06 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:06 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1458.106674][T29387] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1458.137819][T29387] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1458.187895][T29394] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:06 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1458.419387][ T8560] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1458.449305][T27691] usb 4-1: new high-speed USB device number 46 using dummy_hcd 13:02:06 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000f000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1458.498222][T29414] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1458.518893][T29414] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:07 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1458.556614][T29421] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1458.710458][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1458.789732][ T8560] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1458.812904][ T8560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1458.875652][T29434] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1458.893039][T29434] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1458.914688][T29434] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1458.999102][T27691] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1459.008149][T27691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.018175][T27691] usb 4-1: Product: syz [ 1459.023139][T27691] usb 4-1: Manufacturer: syz [ 1459.027816][T27691] usb 4-1: SerialNumber: syz [ 1459.034322][ T8560] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1459.043618][ T8560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.053957][T27691] usb 4-1: config 0 descriptor?? [ 1459.059461][ T8560] usb 1-1: Product: syz [ 1459.066085][ T8560] usb 1-1: Manufacturer: syz [ 1459.072120][ T8560] usb 1-1: SerialNumber: syz [ 1459.127104][ T8560] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1459.318827][T27691] usb read operation failed. (-32) [ 1459.688801][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1459.698339][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1459.705857][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1459.798829][T27691] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1459.808393][T27691] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1459.818333][T27691] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1459.843618][T27691] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1459.860895][T27691] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1460.105388][ T20] usb 1-1: USB disconnect, device number 33 13:02:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:09 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000020000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:09 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1461.128081][ T20] usb 4-1: USB disconnect, device number 46 13:02:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1461.268055][T29483] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1461.279831][T29483] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1461.302041][T29483] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1461.478624][ T902] usb 1-1: new high-speed USB device number 34 using dummy_hcd 13:02:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000040000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:10 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:10 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1461.652202][T29505] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1461.668722][ T20] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1461.680134][T29505] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1461.690114][T29505] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1461.849046][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1461.877100][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1461.958845][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 1462.088631][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1462.097744][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.107621][ T902] usb 1-1: Product: syz [ 1462.112742][ T902] usb 1-1: Manufacturer: syz [ 1462.117345][ T902] usb 1-1: SerialNumber: syz [ 1462.159794][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1462.238694][ T20] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1462.247780][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.259019][ T20] usb 4-1: Product: syz [ 1462.263209][ T20] usb 4-1: Manufacturer: syz [ 1462.267803][ T20] usb 4-1: SerialNumber: syz [ 1462.277204][ T20] usb 4-1: config 0 descriptor?? [ 1462.538642][ T20] usb read operation failed. (-32) [ 1462.728637][ T902] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1462.738282][ T902] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1462.753018][ T902] usb 1-1: ath9k_htc: USB layer deinitialized [ 1463.018707][ T20] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1463.028597][ T20] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1463.038355][ T20] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1463.064226][ T20] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1463.086931][ T20] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1463.142077][T27691] usb 1-1: USB disconnect, device number 34 13:02:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:12 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000041000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:12 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:12 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1464.233292][ T20] usb 4-1: USB disconnect, device number 47 13:02:12 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:12 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000b43000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1464.598669][ T8495] usb 1-1: new high-speed USB device number 35 using dummy_hcd 13:02:13 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:13 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, 0x0, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1464.748591][ T20] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1464.757918][T29596] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1464.776141][T29596] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1464.817735][T29604] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1464.971167][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1464.983907][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1465.008535][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 1465.188564][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1465.197673][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.213687][ T8495] usb 1-1: Product: syz [ 1465.217921][ T8495] usb 1-1: Manufacturer: syz [ 1465.224605][ T8495] usb 1-1: SerialNumber: syz [ 1465.279687][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1465.348664][ T20] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1465.357863][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.367332][ T20] usb 4-1: Product: syz [ 1465.373172][ T20] usb 4-1: Manufacturer: syz [ 1465.377869][ T20] usb 4-1: SerialNumber: syz [ 1465.385532][ T20] usb 4-1: config 0 descriptor?? [ 1465.648513][ T20] usb read operation failed. (-32) [ 1465.898754][ T902] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1465.911117][ T902] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1465.917603][ T902] usb 1-1: ath9k_htc: USB layer deinitialized [ 1466.128444][ T20] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1466.138113][ T20] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1466.147979][ T20] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1466.173095][ T20] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1466.190664][ T20] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1466.515904][ T902] usb 1-1: USB disconnect, device number 35 13:02:15 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:02:15 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000060000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:15 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, 0x0, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:15 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1467.344714][ T1274] usb 4-1: USB disconnect, device number 48 13:02:15 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1467.496190][T29655] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1467.529947][T29655] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1467.575481][T29668] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000030000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1467.748276][ T8495] usb 1-1: new high-speed USB device number 36 using dummy_hcd 13:02:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:16 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, 0x0, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1467.903660][T29682] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1467.944030][T29682] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1467.985110][T29693] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:16 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:02:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000040030000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:16 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1468.138601][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1468.161149][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1468.353853][T29712] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1468.378682][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1468.384094][T29712] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1468.394494][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.413298][ T8495] usb 1-1: Product: syz [ 1468.429647][ T8495] usb 1-1: Manufacturer: syz [ 1468.443109][ T8495] usb 1-1: SerialNumber: syz [ 1468.491569][T29720] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1468.525618][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1469.128459][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1469.137882][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1469.147488][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1469.765017][T18131] usb 1-1: USB disconnect, device number 36 13:02:18 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000003400000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:18 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:18 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:18 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:02:18 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1470.398887][T29748] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1470.431689][T29748] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:18 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000100003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1470.648735][T27691] usb 1-1: new high-speed USB device number 37 using dummy_hcd 13:02:19 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:19 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1470.739455][T29774] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1470.796621][T29774] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1471.008677][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1471.044009][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1471.263255][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1471.272438][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.283303][T27691] usb 1-1: Product: syz [ 1471.287501][T27691] usb 1-1: Manufacturer: syz [ 1471.293575][T27691] usb 1-1: SerialNumber: syz [ 1471.338866][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1471.908251][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1471.917669][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1471.930272][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1472.531063][ T8495] usb 1-1: USB disconnect, device number 37 13:02:21 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x0, 0x0, "dfff672f"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:21 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000200003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:21 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, 0x0) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:21 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:21 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1473.207415][T29821] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1473.241790][T29821] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000300003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1473.408158][ T902] usb 1-1: new high-speed USB device number 38 using dummy_hcd 13:02:21 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:21 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, 0x0) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1473.507588][T29845] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1473.527533][T29845] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1473.838437][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1473.865465][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1474.050451][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1474.059661][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.067652][ T902] usb 1-1: Product: syz [ 1474.074576][ T902] usb 1-1: Manufacturer: syz [ 1474.080580][ T902] usb 1-1: SerialNumber: syz [ 1474.138905][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1474.768037][ T902] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1474.777534][ T902] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1474.792369][ T902] usb 1-1: ath9k_htc: USB layer deinitialized [ 1475.407174][ T8560] usb 1-1: USB disconnect, device number 38 13:02:24 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x0, 0x0, "dfff672f"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:24 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:24 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000400003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:24 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, 0x0) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:24 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1476.062337][T29893] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1476.099618][T29893] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:24 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:24 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:24 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000500003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1476.309483][ T8560] usb 1-1: new high-speed USB device number 39 using dummy_hcd 13:02:24 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1476.409346][T29918] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1476.438320][T29918] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1476.718315][ T8560] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1476.733612][ T8560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1476.907991][ T8560] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1476.917109][ T8560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.925457][ T8560] usb 1-1: Product: syz [ 1476.929956][ T8560] usb 1-1: Manufacturer: syz [ 1476.934565][ T8560] usb 1-1: SerialNumber: syz [ 1476.980521][ T8560] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1477.568055][ T8560] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1477.577444][ T8560] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1477.589879][ T8560] usb 1-1: ath9k_htc: USB layer deinitialized [ 1478.204103][ T8495] usb 1-1: USB disconnect, device number 39 13:02:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x0, 0x0, "dfff672f"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:27 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:27 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000600003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:27 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:27 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1478.840909][T29961] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1478.878170][T29961] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1478.948718][T29978] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:27 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:27 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000700003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1479.057767][ T8495] usb 1-1: new high-speed USB device number 40 using dummy_hcd 13:02:27 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:27 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1479.245940][T29993] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1479.272474][T29993] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1479.305556][T30004] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1479.418220][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1479.444284][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1479.647837][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1479.656913][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.666280][ T8495] usb 1-1: Product: syz [ 1479.671235][ T8495] usb 1-1: Manufacturer: syz [ 1479.675822][ T8495] usb 1-1: SerialNumber: syz [ 1479.719125][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1480.287807][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1480.297216][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1480.309063][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1480.902864][ T1274] usb 1-1: USB disconnect, device number 40 13:02:29 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x25, &(0x7f0000000100)=@generic={0x0, 0x0, 0x1d, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:29 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:29 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000800003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:29 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:30 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1481.553698][T30039] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1481.573430][T30039] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1481.622042][T30048] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:30 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:30 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000900003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1481.767851][ T1274] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1481.777877][T27197] usb 4-1: new high-speed USB device number 49 using dummy_hcd 13:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:30 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:30 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1481.980443][T30065] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1481.989258][T27197] usb 4-1: device descriptor read/64, error 18 [ 1482.018111][T30065] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1482.065978][T30075] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1482.128242][ T1274] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1482.168918][ T1274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1482.277797][T27197] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1482.397678][ T1274] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1482.407304][ T1274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.415404][ T1274] usb 1-1: Product: syz [ 1482.419730][ T1274] usb 1-1: Manufacturer: syz [ 1482.424335][ T1274] usb 1-1: SerialNumber: syz [ 1482.468599][ T1274] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1482.487699][T27197] usb 4-1: device descriptor read/64, error 18 [ 1482.617818][T27197] usb usb4-port1: attempt power cycle [ 1483.037761][T27197] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1483.087795][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1483.097297][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1483.105084][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1483.207650][T27197] usb 4-1: device descriptor read/8, error -61 [ 1483.487549][T27197] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1483.706233][ T8560] usb 1-1: USB disconnect, device number 41 [ 1483.718608][T27197] usb 4-1: device descriptor read/8, error -61 [ 1483.847764][T27197] usb usb4-port1: unable to enumerate USB device 13:02:32 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x25, &(0x7f0000000100)=@generic={0x0, 0x0, 0x1d, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1484.240275][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.246608][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 13:02:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:32 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:32 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000c00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:32 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, 0x0, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1484.509774][T27197] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1484.608621][T30113] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 13:02:33 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:33 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1484.650294][T30113] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1484.700083][T30126] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000f00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:33 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1484.857691][ T8560] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1484.917616][T27197] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1484.939480][T27197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 13:02:33 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1485.053004][T30145] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1485.061509][ T8560] usb 4-1: device descriptor read/64, error 18 [ 1485.086610][T30145] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1485.121764][T30152] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1485.177847][T27197] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1485.186975][T27197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.221578][T27197] usb 1-1: Product: syz [ 1485.225885][T27197] usb 1-1: Manufacturer: syz [ 1485.239095][T27197] usb 1-1: SerialNumber: syz [ 1485.308891][T27197] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1485.338279][ T8560] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1485.537435][ T8560] usb 4-1: device descriptor read/64, error 18 [ 1485.657888][ T8560] usb usb4-port1: attempt power cycle [ 1485.947503][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1485.959951][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1485.966542][T27197] usb 1-1: ath9k_htc: USB layer deinitialized [ 1486.067465][ T8560] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1486.237885][ T8560] usb 4-1: device descriptor read/8, error -61 [ 1486.517361][ T8560] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1486.559722][T27197] usb 1-1: USB disconnect, device number 42 [ 1486.687483][ T8560] usb 4-1: device descriptor read/8, error -61 [ 1486.808011][ T8560] usb usb4-port1: unable to enumerate USB device 13:02:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x25, &(0x7f0000000100)=@generic={0x0, 0x0, 0x1d, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1487.377511][ T8560] usb 1-1: new high-speed USB device number 43 using dummy_hcd 13:02:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:35 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000002000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:35 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:35 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:36 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1487.686668][T30190] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1487.737783][ T8560] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1487.755081][ T8560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 13:02:36 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000004000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:36 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:36 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1487.967677][T27691] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1487.988949][ T8560] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1488.010361][ T8560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.057784][ T8560] usb 1-1: Product: syz 13:02:36 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1488.080393][ T8560] usb 1-1: Manufacturer: syz [ 1488.103047][ T8560] usb 1-1: SerialNumber: syz [ 1488.136622][T30220] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1488.169018][T27691] usb 4-1: device descriptor read/64, error 18 [ 1488.176959][ T8560] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1488.447882][T27691] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1488.637586][T27691] usb 4-1: device descriptor read/64, error 18 [ 1488.757816][T27691] usb usb4-port1: attempt power cycle [ 1488.777483][ T8560] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1488.786970][ T8560] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1488.796994][ T8560] usb 1-1: ath9k_htc: USB layer deinitialized [ 1489.177243][T27691] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1489.347351][T27691] usb 4-1: device descriptor read/8, error -61 [ 1489.403948][T18131] usb 1-1: USB disconnect, device number 43 [ 1489.617241][T27691] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1489.787585][T27691] usb 4-1: device descriptor read/8, error -61 13:02:38 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x33, &(0x7f0000000100)=@generic={0x0, 0x0, 0x2b, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1489.910921][T27691] usb usb4-port1: unable to enumerate USB device [ 1490.237265][ T20] usb 1-1: new high-speed USB device number 44 using dummy_hcd 13:02:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:39 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:39 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000004100003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:39 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1490.621685][ T20] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1490.652603][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 13:02:39 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1490.725395][T30260] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1490.877604][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1490.886681][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:02:39 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:39 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000000b4300003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:39 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1490.985495][ T20] usb 1-1: Product: syz [ 1491.002711][T30281] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1491.054154][ T20] usb 1-1: Manufacturer: syz [ 1491.071667][ T20] usb 1-1: SerialNumber: syz 13:02:39 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1491.127160][T27691] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1491.139641][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1491.337839][T27691] usb 4-1: device descriptor read/64, error 18 [ 1491.607204][T27691] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1491.737200][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1491.746717][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1491.759046][ T20] usb 1-1: ath9k_htc: USB layer deinitialized [ 1491.817243][T27691] usb 4-1: device descriptor read/64, error 18 [ 1491.937239][T27691] usb usb4-port1: attempt power cycle [ 1492.347188][T27691] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1492.374023][ T8495] usb 1-1: USB disconnect, device number 44 [ 1492.517174][T27691] usb 4-1: device descriptor read/8, error -61 [ 1492.807282][T27691] usb 4-1: new high-speed USB device number 64 using dummy_hcd 13:02:41 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x33, &(0x7f0000000100)=@generic={0x0, 0x0, 0x2b, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1493.007332][T27691] usb 4-1: device descriptor read/8, error -61 [ 1493.128797][T27691] usb usb4-port1: unable to enumerate USB device [ 1493.167158][ T8495] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1493.567452][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1493.577674][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 13:02:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:42 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000006000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:42 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1493.747529][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1493.770232][T30331] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1493.779580][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:02:42 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1493.837703][ T8495] usb 1-1: Product: syz [ 1493.860584][ T8495] usb 1-1: Manufacturer: syz [ 1493.882965][ T8495] usb 1-1: SerialNumber: syz 13:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1493.958415][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:02:42 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13:02:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000ffff8e8800003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1494.112312][T30357] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:42 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1494.177751][ T902] usb 4-1: new high-speed USB device number 65 using dummy_hcd 13:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1494.388020][ T902] usb 4-1: device descriptor read/64, error 18 [ 1494.403719][T30376] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1494.429072][T30376] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1494.449985][T30376] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1494.527175][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1494.552490][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1494.582384][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1494.672978][ T902] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1494.883089][ T902] usb 4-1: device descriptor read/64, error 18 [ 1495.011891][ T902] usb usb4-port1: attempt power cycle [ 1495.153473][ T8495] usb 1-1: USB disconnect, device number 45 [ 1495.426946][ T902] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1495.598027][ T902] usb 4-1: device descriptor read/8, error -61 13:02:44 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x33, &(0x7f0000000100)=@generic={0x0, 0x0, 0x2b, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:44 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 1495.866921][ T902] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1495.976961][T27691] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1496.037037][ T902] usb 4-1: device descriptor read/8, error -61 [ 1496.158145][ T902] usb usb4-port1: unable to enumerate USB device [ 1496.376976][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1496.387388][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1496.557238][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1496.576600][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.596950][T27691] usb 1-1: Product: syz [ 1496.601150][T27691] usb 1-1: Manufacturer: syz [ 1496.605760][T27691] usb 1-1: SerialNumber: syz [ 1496.671478][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:02:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:45 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:45 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13:02:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000ffffff9e00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:45 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1496.943715][T30419] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1496.974464][T30419] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1497.011048][T30426] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:45 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 13:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000ffffffef00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:45 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1497.256916][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1497.266969][T27197] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1497.293498][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1497.335122][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1497.425130][T30440] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1497.450517][T30440] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1497.505259][T27197] usb 4-1: device descriptor read/64, error 18 [ 1497.512345][T30452] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1497.806809][T27197] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1497.885032][T27691] usb 1-1: USB disconnect, device number 46 [ 1498.015106][T27197] usb 4-1: device descriptor read/64, error 18 [ 1498.142354][T27197] usb usb4-port1: attempt power cycle 13:02:46 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3a, &(0x7f0000000100)=@generic={0x0, 0x0, 0x32, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:46 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1498.567016][T27197] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1498.687204][T27691] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1498.746928][T27197] usb 4-1: device descriptor read/8, error -61 [ 1499.026792][T27197] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1499.046965][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1499.057505][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1499.197017][T27197] usb 4-1: device descriptor read/8, error -61 [ 1499.226991][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1499.236290][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.244803][T27691] usb 1-1: Product: syz [ 1499.249475][T27691] usb 1-1: Manufacturer: syz [ 1499.254308][T27691] usb 1-1: SerialNumber: syz [ 1499.297678][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1499.327483][T27197] usb usb4-port1: unable to enumerate USB device 13:02:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df901"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:48 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000fffffff000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:48 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x48) [ 1499.884799][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1499.905736][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1499.963205][T27691] usb 1-1: ath9k_htc: USB layer deinitialized 13:02:48 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x48) [ 1500.021009][T30493] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1500.056434][T30493] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1500.111091][T30505] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000fffffffc00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:48 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x48) [ 1500.256760][ T8495] usb 4-1: new high-speed USB device number 73 using dummy_hcd 13:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:48 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1500.482752][T30525] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1500.510432][T30525] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1500.510795][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1500.531514][ T1274] usb 1-1: USB disconnect, device number 47 [ 1500.577347][ T8495] usb 4-1: no configurations [ 1500.582404][ T8495] usb 4-1: can't read configurations, error -22 [ 1500.582497][T30535] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1500.776803][ T8495] usb 4-1: new high-speed USB device number 74 using dummy_hcd 13:02:49 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3a, &(0x7f0000000100)=@generic={0x0, 0x0, 0x32, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:49 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x48) [ 1501.026849][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1501.077279][ T8495] usb 4-1: no configurations [ 1501.082359][ T8495] usb 4-1: can't read configurations, error -22 [ 1501.099846][ T8495] usb usb4-port1: attempt power cycle [ 1501.356822][ T8560] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1501.546665][ T8495] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1501.657117][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1501.707581][ T8495] usb 4-1: no configurations [ 1501.712406][ T8495] usb 4-1: can't read configurations, error -22 [ 1501.717037][ T8560] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1501.735101][ T8560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1501.866733][ T8495] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1501.906810][ T8560] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1501.916164][ T8560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.925110][ T8560] usb 1-1: Product: syz [ 1501.930264][ T8560] usb 1-1: Manufacturer: syz [ 1501.935041][ T8560] usb 1-1: SerialNumber: syz [ 1501.968294][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1501.987813][ T8560] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1502.011901][ T8495] usb 4-1: no configurations [ 1502.016633][ T8495] usb 4-1: can't read configurations, error -22 [ 1502.023192][ T8495] usb usb4-port1: unable to enumerate USB device [ 1502.566702][ T8560] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1502.576468][ T8560] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1502.589858][ T8560] usb 1-1: ath9k_htc: USB layer deinitialized 13:02:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df901"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:51 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000888effff00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:51 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:02:51 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x48) [ 1503.076763][T30566] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 13:02:51 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x48) [ 1503.128439][T30566] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1503.170154][T30578] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1503.181367][ T8495] usb 1-1: USB disconnect, device number 48 13:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:02:51 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000007fffffff00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:51 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x48) 13:02:51 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1503.396068][ T20] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1503.501026][T30594] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1503.531429][T30594] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1503.676618][ T20] usb 4-1: Using ep0 maxpacket: 8 13:02:52 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3a, &(0x7f0000000100)=@generic={0x0, 0x0, 0x32, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:52 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x48) [ 1503.737161][ T20] usb 4-1: no configurations [ 1503.742033][ T20] usb 4-1: can't read configurations, error -22 [ 1503.926740][ T20] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1504.106620][ T8495] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1504.176754][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 1504.227018][ T20] usb 4-1: no configurations [ 1504.231643][ T20] usb 4-1: can't read configurations, error -22 [ 1504.239863][ T20] usb usb4-port1: attempt power cycle [ 1504.537499][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1504.547808][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1504.647024][ T20] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1504.737024][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1504.737057][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.737078][ T8495] usb 1-1: Product: syz [ 1504.759365][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 1504.764756][ T8495] usb 1-1: Manufacturer: syz [ 1504.769713][ T8495] usb 1-1: SerialNumber: syz [ 1504.798277][ T20] usb 4-1: no configurations [ 1504.802914][ T20] usb 4-1: can't read configurations, error -22 [ 1504.817765][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1504.956728][ T20] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1505.058239][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 1505.101788][ T20] usb 4-1: no configurations [ 1505.106674][ T20] usb 4-1: can't read configurations, error -22 [ 1505.113087][ T20] usb usb4-port1: unable to enumerate USB device [ 1505.486705][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1505.498043][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1505.505203][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized 13:02:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df901"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:54 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000009effffff00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:02:54 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x48) 13:02:54 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1506.129393][ T8560] usb 1-1: USB disconnect, device number 49 13:02:54 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x48) [ 1506.198709][T30640] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1506.246686][T30640] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635000100000f22e0670f3267650f080fc7ad0a006767260f01cf660fc731f30f090fada1c400660fc732ba4100ed", 0x32}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:02:54 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000efffffff00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:54 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x48) [ 1506.456538][T27691] usb 4-1: new high-speed USB device number 81 using dummy_hcd 13:02:54 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1506.555324][T30664] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1506.580922][T30664] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 13:02:55 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3e, &(0x7f0000000100)=@generic={0x0, 0x0, 0x36, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5f"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x48) [ 1506.696396][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1506.736908][T27691] usb 4-1: no configurations [ 1506.750227][T27691] usb 4-1: can't read configurations, error -22 [ 1506.946566][T27691] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1507.106622][ T1274] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1507.188654][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1507.226962][T27691] usb 4-1: no configurations [ 1507.231600][T27691] usb 4-1: can't read configurations, error -22 [ 1507.241305][T27691] usb usb4-port1: attempt power cycle [ 1507.476677][ T1274] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1507.487322][ T1274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1507.656792][ T1274] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1507.666531][T27691] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1507.674458][ T1274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.683019][ T1274] usb 1-1: Product: syz [ 1507.687474][ T1274] usb 1-1: Manufacturer: syz [ 1507.692263][ T1274] usb 1-1: SerialNumber: syz [ 1507.737536][ T1274] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1507.756747][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1507.796810][T27691] usb 4-1: no configurations [ 1507.801883][T27691] usb 4-1: can't read configurations, error -22 [ 1507.956386][T27691] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1508.047375][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1508.087357][T27691] usb 4-1: no configurations [ 1508.092106][T27691] usb 4-1: can't read configurations, error -22 [ 1508.100115][T27691] usb usb4-port1: unable to enumerate USB device [ 1508.326525][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1508.335927][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1508.350649][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1508.944840][T27197] usb 1-1: USB disconnect, device number 50 13:02:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df90102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x7, 'wpan4\x00'}]}, 0x20}}, 0x0) 13:02:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000f0ffffff00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:02:57 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000}, 0x48) 13:02:57 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1509.213443][T30716] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 13:02:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 13:02:57 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000}, 0x48) 13:02:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000026c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 13:02:57 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3e, &(0x7f0000000100)=@generic={0x0, 0x0, 0x36, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5f"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:02:57 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000}, 0x48) 13:02:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000fcffffff00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1509.500892][ T8495] usb 4-1: new high-speed USB device number 85 using dummy_hcd 13:02:58 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1509.766483][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1509.886494][ T8495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.904249][ T8495] usb 4-1: config 0 has no interfaces? [ 1509.916553][ T1274] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1510.066441][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1510.076592][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.084955][ T8495] usb 4-1: Product: syz [ 1510.090109][ T8495] usb 4-1: Manufacturer: syz [ 1510.095150][ T8495] usb 4-1: SerialNumber: syz [ 1510.104268][ T8495] usb 4-1: config 0 descriptor?? [ 1510.346421][ T1274] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1510.363399][ T1274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1510.556847][ T1274] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1510.566764][ T1274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.574847][ T1274] usb 1-1: Product: syz [ 1510.580770][ T1274] usb 1-1: Manufacturer: syz [ 1510.585427][ T1274] usb 1-1: SerialNumber: syz [ 1510.647496][ T1274] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1511.336345][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1511.345883][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1511.361460][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1511.961660][T27691] usb 1-1: USB disconnect, device number 51 13:03:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df90102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, 0x0, 0x0) 13:03:00 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000002000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:00 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1512.180120][ T8495] usb 4-1: USB disconnect, device number 85 13:03:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r0, &(0x7f0000001a40)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80, &(0x7f0000001880)=[{&(0x7f00000003c0)="a8", 0x1}, {0x0}], 0x2}, 0x10) 13:03:00 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:00 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3e, &(0x7f0000000100)=@generic={0x0, 0x0, 0x36, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5f"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:00 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x0, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000003000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:01 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x48) [ 1512.646396][ T8495] usb 4-1: new high-speed USB device number 86 using dummy_hcd 13:03:01 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x0, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1512.886464][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1512.916467][T27691] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1513.006952][ T8495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.030609][ T8495] usb 4-1: config 0 has no interfaces? [ 1513.206197][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1513.215420][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.231892][ T8495] usb 4-1: Product: syz [ 1513.237784][ T8495] usb 4-1: Manufacturer: syz [ 1513.242410][ T8495] usb 4-1: SerialNumber: syz [ 1513.252217][ T8495] usb 4-1: config 0 descriptor?? [ 1513.326325][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1513.346173][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1513.536559][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1513.545728][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.555237][T27691] usb 1-1: Product: syz [ 1513.560631][T27691] usb 1-1: Manufacturer: syz [ 1513.565242][T27691] usb 1-1: SerialNumber: syz [ 1513.617438][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1514.266356][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1514.280379][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1514.287250][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1514.888586][T27197] usb 1-1: USB disconnect, device number 52 13:03:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df90102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:03 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000004000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:03 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x0, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:03 executing program 1: r0 = socket(0x2, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1515.251917][ T1274] usb 4-1: USB disconnect, device number 86 13:03:03 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000100)=@generic={0x0, 0x0, 0x38, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:03 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:04 executing program 1: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) 13:03:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000005000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:04 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:04 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1515.846127][ T1274] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1515.886040][ T902] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1516.116098][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1516.249228][ T1274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.256348][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1516.259365][ T1274] usb 4-1: config 0 has no interfaces? [ 1516.283704][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1516.456227][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1516.456226][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1516.465304][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.476992][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.491781][ T1274] usb 4-1: Product: syz [ 1516.492728][ T902] usb 1-1: Product: syz [ 1516.497623][ T1274] usb 4-1: Manufacturer: syz [ 1516.504864][ T902] usb 1-1: Manufacturer: syz [ 1516.507848][ T1274] usb 4-1: SerialNumber: syz [ 1516.515459][ T902] usb 1-1: SerialNumber: syz [ 1516.521475][ T1274] usb 4-1: config 0 descriptor?? [ 1516.587256][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1517.155999][ T902] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1517.165715][ T902] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1517.176167][ T902] usb 1-1: ath9k_htc: USB layer deinitialized [ 1517.790480][ T1274] usb 1-1: USB disconnect, device number 53 13:03:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)="69dac2381e299db4331bc7b10f13d2c54839847cc87689f8fcd4118ecde5084a05cf828bb40a5a4a27683e38d8b75389dd0fd8d75b33a1a8ebdf279709cb2fa0b118229d212f528535e5cad19e61c7d0c636169d2384aed20ec08c505f6a49d492274c99cb5301dc64b7a25e77bdc3705b7cfe404bb7c5aa3b54f8bf62137c8f8074d2b090ba27886d2d3dd9e9923d9dd8", 0x91, 0x0, &(0x7f0000000140)=@abs, 0x8) 13:03:06 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:06 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:06 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000006000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:06 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000100)=@generic={0x0, 0x0, 0x38, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1518.341881][T27691] usb 4-1: USB disconnect, device number 87 13:03:06 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0x18}, 0xc) 13:03:06 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:06 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:07 executing program 1: r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 13:03:07 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x48) [ 1518.736693][ T1274] usb 1-1: new high-speed USB device number 54 using dummy_hcd 13:03:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000007000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1518.926006][T27691] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1519.146101][ T1274] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1519.156469][ T1274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1519.206102][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1519.346123][ T1274] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1519.355319][T27691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.365755][ T1274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.374520][T27691] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1519.387081][ T1274] usb 1-1: Product: syz [ 1519.391490][ T1274] usb 1-1: Manufacturer: syz [ 1519.397828][ T1274] usb 1-1: SerialNumber: syz [ 1519.436994][ T1274] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1519.586138][T27691] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1519.595210][T27691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.605529][T27691] usb 4-1: Product: syz [ 1519.610771][T27691] usb 4-1: Manufacturer: syz [ 1519.615390][T27691] usb 4-1: SerialNumber: syz [ 1519.623936][T27691] usb 4-1: config 0 descriptor?? [ 1520.096072][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1520.106837][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1520.113925][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1520.723277][ T8495] usb 1-1: USB disconnect, device number 54 13:03:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:09 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:09 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 13:03:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000008000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:09 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000100)=@generic={0x0, 0x0, 0x38, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1521.435328][ T1274] usb 4-1: USB disconnect, device number 88 13:03:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x48) 13:03:10 executing program 1: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 13:03:10 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:10 executing program 1: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 13:03:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000009000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:10 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x48) [ 1521.805790][ T8495] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1521.915721][ T1274] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1522.155792][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1522.225839][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1522.236146][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1522.276400][ T1274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.287068][ T1274] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1522.445800][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1522.455225][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.455904][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1522.464544][ T8495] usb 1-1: Product: syz [ 1522.477329][ T8495] usb 1-1: Manufacturer: syz [ 1522.482265][ T8495] usb 1-1: SerialNumber: syz [ 1522.487689][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.505731][ T1274] usb 4-1: Product: syz [ 1522.509930][ T1274] usb 4-1: Manufacturer: syz [ 1522.515446][ T1274] usb 4-1: SerialNumber: syz [ 1522.535061][ T1274] usb 4-1: config 0 descriptor?? [ 1522.549267][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1523.185726][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1523.196290][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1523.203303][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1523.798533][ T8560] usb 1-1: USB disconnect, device number 55 13:03:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:12 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:12 executing program 1: getrusage(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)) 13:03:12 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x60000000}, 0x48) 13:03:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000c000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:12 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1524.514539][ T8495] usb 4-1: USB disconnect, device number 89 13:03:13 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008000cffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x0, 0x60000000}, 0x48) 13:03:13 executing program 1: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 13:03:13 executing program 1: r0 = socket(0x2, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18}, 0xc) 13:03:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000f000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:13 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000e1ff7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f0207005e5a076d83923dd29c034055c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a060091ff105000000000000007ea0c34f17e33b6ef3bb622003b538dfd8e012e7d578e51bc52a99e90f4580d760551b43341a2d7cbdb9cd38bdb2ca8eebaff8aa3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d67047bc04b07f5d356d082d2789cb132b8667c21476619f28d9961b6a1fe53184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd38608b32808b802fe690000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac1220800000000000000ce63a38d2fd50117b89551b359b4eea0c6e957670000000000000000dbfd2e6d7f715a7f3deadd7130856f5c643672254fc3b41d01198600f815303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a4693b8685211bbae3e2ed0a5670e73130fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f39208337841cef386e22cc22ee17476d738992533ac2a9f5a699593f085019cae0b4183fb11c73f979ca9857399537f5dc2acb72c7eae993fc9eb22d1306e565b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e06734556f541fa629fbef2461c96a00200000000000000e29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415eeadcda2130f5011e48455b5a8b90d8bfae158b94f50adab988dd8e12baf5cc9390000000067db8c2977aab37d9ac4cfc1c7b4000000000000fa47742f6c539c4b11e7d7262a1457c39495c826b956ba859acce3c177b91bd7d5ca1664fe2f3ced8468911806040000005e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3adf008141bdee5d27874b2f663ddeef000aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a01e5f6eb2eea0d0df414b315f651c8452392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702ceeab00008df5a55528df3255fedb0b79e0033607490350000000000000000000000000a528affd95e4b960fbbf77e48d8852cd8cba2aa17eb0a713a3d76e2a16b34ef32039bbf6f910a88e0ce69b4547aac484d9966fda7b0aa7b67c8b83c1091e7bff10de3d534203b51523144ef9a04782d3f1e52eaf6b555f15fe4a76a200000000000000a9692047a0be1b378840a68a164750d0f86c84d655e9b24d4c418c70c76bd8bfe550e2e421cd30592a712c6f7c47db557e46db42a3c4f607855baa6aeb13a9b2a6d06f324444d84f79b45ef3c28d23363816252df635c6f6936610b07de6274071603782243fd1de959dcbc3a34b98f566d85ab9f148fcca026103218a0d2f677da0ad3640176ef6404e0121020767a870c01394c8f34304d53cf4a9449223d6fb7ada2ee7d9e0c8e916da81612848eeba0d01d87870e7c5b984dabd946c54a3788053a05797159194b9708bd24c6bba64c407c5336506fa7549bcb587a71d816e1af6f48b9f4b9ad647eb0416cb882a806406deda2c38be4853af2e848aa742f9c45643f6a09318a7e35f8f6e816fa05cf58db83796391532cdd78cdce16f325be9fac6e273c009647804002ae2ebd0a7717a1cfbd227957dc17ea1eaee91d699da270f51cad8c4a3082306ddeeec3f2ad78345dfa4c1a6dba100c54649805f5583d6bb5530f507"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x60000000}, 0x48) [ 1524.865765][ T8560] usb 1-1: new high-speed USB device number 56 using dummy_hcd 13:03:13 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) [ 1524.995841][ T8495] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1525.226035][ T8560] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1525.238086][ T8560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1525.275643][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1525.405959][ T8560] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1525.421595][ T8560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.431155][ T8560] usb 1-1: Product: syz [ 1525.435319][ T8560] usb 1-1: Manufacturer: syz [ 1525.435959][ T8495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.450688][ T8495] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1525.450872][ T8560] usb 1-1: SerialNumber: syz [ 1525.517211][ T8560] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1525.635666][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1525.649636][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.658967][ T8495] usb 4-1: Product: syz [ 1525.663132][ T8495] usb 4-1: Manufacturer: syz [ 1525.669544][ T8495] usb 4-1: SerialNumber: syz [ 1525.676626][ T8495] usb 4-1: config 0 descriptor?? [ 1526.105659][ T8560] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1526.115228][ T8560] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1526.127864][ T8560] usb 1-1: ath9k_htc: USB layer deinitialized 13:03:16 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df90102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:16 executing program 1: lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xffffffffffffffff) 13:03:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000041000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) 13:03:16 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1527.609847][ T8560] usb 4-1: USB disconnect, device number 90 13:03:16 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:16 executing program 1: setresuid(0xffffffffffffffff, 0xee01, 0x0) 13:03:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) 13:03:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000060000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1527.932722][ T902] usb 1-1: USB disconnect, device number 56 13:03:16 executing program 1: semget(0x3, 0x0, 0x512) 13:03:16 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) [ 1528.135600][ T8560] usb 4-1: new high-speed USB device number 91 using dummy_hcd 13:03:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000030000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1528.395817][ T8560] usb 4-1: Using ep0 maxpacket: 8 [ 1528.505614][ T902] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1528.515824][ T8560] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1528.676186][ T8560] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1528.691573][ T8560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.700071][ T8560] usb 4-1: Product: syz [ 1528.704259][ T8560] usb 4-1: Manufacturer: syz [ 1528.714557][ T8560] usb 4-1: SerialNumber: syz [ 1528.724979][ T8560] usb 4-1: config 0 descriptor?? [ 1528.896363][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1528.906709][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1529.105958][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1529.115418][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.123553][ T902] usb 1-1: Product: syz [ 1529.130701][ T902] usb 1-1: Manufacturer: syz [ 1529.136152][ T902] usb 1-1: SerialNumber: syz [ 1529.196571][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1529.865401][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1529.875123][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1529.888177][ T20] usb 1-1: ath9k_htc: USB layer deinitialized 13:03:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df90102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:19 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) 13:03:19 executing program 1: shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) 13:03:19 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x492492492492634, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000050000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1530.694055][ T1274] usb 4-1: USB disconnect, device number 91 [ 1531.315392][ T1274] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1531.565395][ T1274] usb 4-1: Using ep0 maxpacket: 8 13:03:20 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:20 executing program 1: r0 = epoll_create(0x38) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 13:03:20 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) 13:03:20 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000060000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:20 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1531.641844][ T20] usb 1-1: USB disconnect, device number 57 [ 1531.705721][ T1274] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 13:03:20 executing program 5: unlinkat(0xffffffffffffffff, 0x0, 0xff50848dcb116725) 13:03:20 executing program 1: semget(0x3, 0x4, 0x209) [ 1531.895724][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1531.921702][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.968173][ T1274] usb 4-1: Product: syz [ 1531.991037][ T1274] usb 4-1: Manufacturer: syz [ 1532.013092][ T1274] usb 4-1: SerialNumber: syz [ 1532.052719][ T1274] usb 4-1: config 0 descriptor?? [ 1532.185329][ T20] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1532.565360][ T20] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1532.576438][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1532.745449][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1532.754747][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.763444][ T20] usb 1-1: Product: syz [ 1532.768104][ T20] usb 1-1: Manufacturer: syz [ 1532.772844][ T20] usb 1-1: SerialNumber: syz [ 1532.816058][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1533.395311][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1533.406151][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1533.412781][ T20] usb 1-1: ath9k_htc: USB layer deinitialized 13:03:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df90102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:22 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000070000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:22 executing program 1: shmget(0x0, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) 13:03:22 executing program 5: semget$private(0x0, 0x3, 0x210) 13:03:22 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1533.810124][T27691] usb 4-1: USB disconnect, device number 92 [ 1534.385242][T27691] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1534.625189][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1534.745412][T27691] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1534.905552][T27691] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1534.914617][T27691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.924234][T27691] usb 4-1: Product: syz [ 1534.929797][T27691] usb 4-1: Manufacturer: syz [ 1534.937183][T27691] usb 4-1: SerialNumber: syz [ 1534.944003][T27691] usb 4-1: config 0 descriptor?? 13:03:23 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:23 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x303f85, 0x126) 13:03:23 executing program 1: r0 = msgget(0x3, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f00000000c0)=""/118) 13:03:23 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:23 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000090000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1535.233337][ T1274] usb 1-1: USB disconnect, device number 58 13:03:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 13:03:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/73, 0x49) [ 1535.805265][ T1274] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1536.165140][ T1274] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1536.176673][ T1274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1536.345482][ T1274] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1536.354712][ T1274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.363322][ T1274] usb 1-1: Product: syz [ 1536.369136][ T1274] usb 1-1: Manufacturer: syz [ 1536.374106][ T1274] usb 1-1: SerialNumber: syz [ 1536.426890][ T1274] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:03:25 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:25 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000430b0000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:25 executing program 1: openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) 13:03:25 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7fff}, 0x0, 0x0) 13:03:25 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8), 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1536.907227][T18131] usb 4-1: USB disconnect, device number 93 [ 1536.995164][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1537.018895][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1537.063615][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1537.465063][T18131] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1537.705025][T18131] usb 4-1: Using ep0 maxpacket: 8 [ 1537.985335][T18131] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1537.994474][T18131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.010387][T18131] usb 4-1: Product: syz [ 1538.014624][T18131] usb 4-1: Manufacturer: syz [ 1538.020930][T18131] usb 4-1: SerialNumber: syz [ 1538.032688][T18131] usb 4-1: config 0 descriptor?? [ 1538.295074][T18131] usb read operation failed. (-32) 13:03:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:27 executing program 5: timer_create(0x6, &(0x7f0000000340)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) 13:03:27 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x41, 0x0) 13:03:27 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000000c0000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:27 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8), 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1538.775046][T18131] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1538.780820][ T8495] usb 1-1: USB disconnect, device number 59 [ 1538.791053][T18131] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1538.856858][T18131] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw 13:03:27 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:03:27 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system', 0x319985, 0xfa) [ 1539.052740][T18131] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1539.141393][T18131] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1539.374973][ T8495] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1539.765302][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1539.775579][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1539.965033][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1539.974300][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.984061][ T8495] usb 1-1: Product: syz [ 1539.989552][ T8495] usb 1-1: Manufacturer: syz [ 1539.994331][ T8495] usb 1-1: SerialNumber: syz 13:03:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:28 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000000f0000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:28 executing program 5: openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x6a00, 0x0) 13:03:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)) 13:03:28 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8), 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1540.020413][ T2377] usb 4-1: USB disconnect, device number 94 [ 1540.046457][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1540.595010][ T2377] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1540.635037][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1540.644434][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1540.659060][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1540.864841][ T2377] usb 4-1: Using ep0 maxpacket: 8 [ 1541.195641][ T2377] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1541.205007][ T2377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.213103][ T2377] usb 4-1: Product: syz [ 1541.220015][ T2377] usb 4-1: Manufacturer: syz [ 1541.226042][ T2377] usb 4-1: SerialNumber: syz [ 1541.232412][ T2377] usb 4-1: config 0 descriptor?? [ 1541.515107][ T2377] usb read operation failed. (-32) [ 1541.984963][ T2377] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1541.998339][ T2377] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1542.009112][ T2377] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1542.036947][ T2377] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1542.066688][ T2377] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 13:03:30 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:30 executing program 1: signalfd(0xffffffffffffffff, 0x0, 0x0) 13:03:30 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000200000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:30 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18}], 0x18}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:30 executing program 5: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) [ 1542.427461][ T8495] usb 1-1: USB disconnect, device number 60 13:03:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={0x0}}, 0x0) 13:03:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) [ 1542.955131][ T8495] usb 1-1: new high-speed USB device number 61 using dummy_hcd 13:03:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:31 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000400000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:31 executing program 1: openat$pfkey(0xffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000a00), 0x0, 0x0) 13:03:31 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:31 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) [ 1543.201869][ T902] usb 4-1: USB disconnect, device number 95 [ 1543.314854][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1543.343045][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1543.584865][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1543.598504][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.618472][ T8495] usb 1-1: Product: syz [ 1543.643896][ T8495] usb 1-1: Manufacturer: syz [ 1543.649046][ T8495] usb 1-1: SerialNumber: syz [ 1543.695860][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1543.784673][ T902] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1544.024709][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1544.274747][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1544.289291][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1544.295955][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1544.304755][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1544.313815][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.322544][ T902] usb 4-1: Product: syz [ 1544.327077][ T902] usb 4-1: Manufacturer: syz [ 1544.331722][ T902] usb 4-1: SerialNumber: syz [ 1544.349268][ T902] usb 4-1: config 0 descriptor?? [ 1544.624747][ T902] usb read operation failed. (-32) [ 1545.104805][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1545.118006][ T902] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1545.127858][ T902] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1545.149989][ T902] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1545.167793][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1545.676774][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.683104][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 13:03:34 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:34 executing program 1: openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) syz_open_dev$mouse(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) 13:03:34 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00') 13:03:34 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000410000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:34 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000040)) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1546.064944][ T1274] usb 1-1: USB disconnect, device number 61 13:03:34 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000040)) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:34 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13:03:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xb0}}, 0x0) 13:03:34 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000b430000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1546.370455][ T8495] usb 4-1: USB disconnect, device number 96 13:03:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) 13:03:34 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000040)) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r0, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1546.594801][ T1274] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1546.915204][ T8495] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1547.034809][ T1274] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1547.045278][ T1274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1547.164519][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1547.235228][ T1274] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1547.245006][ T1274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.253431][ T1274] usb 1-1: Product: syz [ 1547.258489][ T1274] usb 1-1: Manufacturer: syz [ 1547.263372][ T1274] usb 1-1: SerialNumber: syz [ 1547.315445][ T1274] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1547.444718][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1547.458312][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.469732][ T8495] usb 4-1: Product: syz [ 1547.474030][ T8495] usb 4-1: Manufacturer: syz [ 1547.483290][ T8495] usb 4-1: SerialNumber: syz [ 1547.505331][ T8495] usb 4-1: config 0 descriptor?? [ 1547.764566][ T8495] usb read operation failed. (-32) [ 1547.974826][ T1274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1547.984240][ T1274] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1547.997135][ T1274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1548.244713][ T8495] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1548.255252][ T8495] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1548.270412][ T8495] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1548.296491][ T8495] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1548.313868][ T8495] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1549.463863][T27197] usb 4-1: USB disconnect, device number 97 13:03:38 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:38 executing program 5: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 13:03:38 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') 13:03:38 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000600000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1549.762243][ T2377] usb 1-1: USB disconnect, device number 62 13:03:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r0) 13:03:38 executing program 5: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1}, 0x40) socket$l2tp6(0xa, 0x2, 0x73) 13:03:38 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:38 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:03:38 executing program 5: io_setup(0xbf4, &(0x7f0000000140)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:03:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000300003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1550.114450][ T902] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1550.273061][ T2377] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1550.374460][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1550.654806][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1550.668491][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.678595][ T902] usb 4-1: Product: syz [ 1550.682896][ T902] usb 4-1: Manufacturer: syz [ 1550.691683][ T902] usb 4-1: SerialNumber: syz [ 1550.694457][ T2377] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1550.708077][ T2377] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1550.720500][ T902] usb 4-1: config 0 descriptor?? [ 1550.935015][ T2377] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1550.944102][ T2377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.954325][ T2377] usb 1-1: Product: syz [ 1550.958541][ T2377] usb 1-1: Manufacturer: syz [ 1550.963140][ T2377] usb 1-1: SerialNumber: syz [ 1550.994585][ T902] usb read operation failed. (-32) [ 1551.025894][ T2377] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1551.474591][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1551.484391][ T902] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1551.494051][ T902] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1551.520842][ T902] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1551.539562][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1551.685712][ T2377] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1551.695191][ T2377] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1551.701758][ T2377] usb 1-1: ath9k_htc: USB layer deinitialized [ 1552.811235][T18131] usb 4-1: USB disconnect, device number 98 13:03:41 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:41 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:41 executing program 1: keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) 13:03:41 executing program 5: openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) 13:03:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000400300003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1553.473701][ T902] usb 1-1: USB disconnect, device number 63 13:03:42 executing program 1: request_key(&(0x7f0000000240)='cifs.idmap\x00', 0x0, 0x0, 0xfffffffffffffffe) 13:03:42 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, 0x0, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:42 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000240)) 13:03:42 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:03:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000034000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:42 executing program 1: bpf$BPF_TASK_FD_QUERY(0x9, 0x0, 0x0) [ 1553.838714][T18131] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1553.994425][ T902] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1554.114353][T18131] usb 4-1: Using ep0 maxpacket: 8 [ 1554.364454][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1554.374732][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1554.424347][T18131] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1554.433795][T18131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.443226][T18131] usb 4-1: Product: syz [ 1554.448912][T18131] usb 4-1: Manufacturer: syz [ 1554.453636][T18131] usb 4-1: SerialNumber: syz [ 1554.464512][T18131] usb 4-1: config 0 descriptor?? [ 1554.544584][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1554.558162][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.567816][ T902] usb 1-1: Product: syz [ 1554.572101][ T902] usb 1-1: Manufacturer: syz [ 1554.581176][ T902] usb 1-1: SerialNumber: syz [ 1554.625466][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1554.724357][T18131] usb read operation failed. (-32) [ 1555.194330][ T902] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1555.204851][ T902] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1555.212060][ T902] usb 1-1: ath9k_htc: USB layer deinitialized [ 1555.212120][T18131] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1555.243306][T18131] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1555.255559][T18131] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1555.277905][T18131] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1555.295137][T18131] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1556.499276][T18131] usb 4-1: USB disconnect, device number 99 13:03:45 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:45 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, 0x0, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) getsockname$inet(r0, 0x0, 0x0) 13:03:45 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:03:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000001003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1556.987716][T18131] usb 1-1: USB disconnect, device number 64 13:03:45 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, 0x0, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000100)) 13:03:45 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:03:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000002003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 13:03:45 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) [ 1557.344393][T27197] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1557.534221][T18131] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1557.584785][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1557.864438][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1557.875276][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.883292][T27197] usb 4-1: Product: syz [ 1557.888003][T27197] usb 4-1: Manufacturer: syz [ 1557.892640][T27197] usb 4-1: SerialNumber: syz [ 1557.903117][T27197] usb 4-1: config 0 descriptor?? [ 1557.934609][T18131] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1557.945302][T18131] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1558.144476][T18131] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1558.153650][T18131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.163862][T18131] usb 1-1: Product: syz [ 1558.169379][T18131] usb 1-1: Manufacturer: syz [ 1558.174111][T27197] usb read operation failed. (-32) [ 1558.175617][T18131] usb 1-1: SerialNumber: syz [ 1558.226177][T18131] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1558.654179][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1558.663686][T27197] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1558.682934][T27197] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1558.708530][T27197] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1558.726549][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1558.874215][T18131] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1558.883622][T18131] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1558.898293][T18131] usb 1-1: ath9k_htc: USB layer deinitialized [ 1560.040556][T27691] usb 4-1: USB disconnect, device number 100 13:03:49 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:49 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:03:49 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000003003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 13:03:49 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1560.662037][T27691] usb 1-1: USB disconnect, device number 65 13:03:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89a1, 0x0) 13:03:49 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:03:49 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:49 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:49 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 1561.014036][ T1274] usb 4-1: new high-speed USB device number 101 using dummy_hcd 13:03:49 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 1561.254028][T27691] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1561.321456][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1561.624347][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1561.633473][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.642036][ T1274] usb 4-1: Product: syz [ 1561.646717][ T1274] usb 4-1: Manufacturer: syz [ 1561.651338][ T1274] usb 4-1: SerialNumber: syz [ 1561.658475][ T1274] usb 4-1: config 0 descriptor?? [ 1561.674277][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1561.685124][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1561.864083][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1561.874432][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.882508][T27691] usb 1-1: Product: syz [ 1561.889161][T27691] usb 1-1: Manufacturer: syz [ 1561.895086][T27691] usb 1-1: SerialNumber: syz [ 1561.924464][ T1274] usb read operation failed. (-32) [ 1561.945135][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1562.394330][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1562.404988][ T1274] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1562.414873][ T1274] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1562.438160][ T1274] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1562.455573][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1562.594060][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1562.603920][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1562.610943][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1563.700670][ T1274] usb 4-1: USB disconnect, device number 101 13:03:52 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:52 executing program 1: bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x0) 13:03:52 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:52 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:03:52 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000005003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1564.373806][T27197] usb 1-1: USB disconnect, device number 66 13:03:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd7e, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x208, 0x140, 0x208, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) 13:03:52 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r0}]}, 0x28}], 0x1}, 0x0) 13:03:53 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @nl, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @xdp}) 13:03:53 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r0}]}, 0x28}], 0x1}, 0x0) 13:03:53 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000006003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1564.763781][T27691] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1564.944396][T27197] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1565.023852][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1565.304014][T27691] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1565.313062][T27691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.326962][T27691] usb 4-1: Product: syz [ 1565.331191][T27691] usb 4-1: Manufacturer: syz [ 1565.333808][T27197] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1565.348419][T27691] usb 4-1: SerialNumber: syz [ 1565.351123][T27197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1565.367931][T27691] usb 4-1: config 0 descriptor?? [ 1565.534073][T27197] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1565.543443][T27197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.558459][T27197] usb 1-1: Product: syz [ 1565.562709][T27197] usb 1-1: Manufacturer: syz [ 1565.568579][T27197] usb 1-1: SerialNumber: syz [ 1565.625168][T27197] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1565.648436][T27691] usb read operation failed. (-32) [ 1566.113801][T27691] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1566.123472][T27691] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1566.133876][T27691] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1566.158303][T27691] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1566.178043][T27691] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1566.194351][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1566.204957][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1566.211689][T27197] usb 1-1: ath9k_htc: USB layer deinitialized [ 1567.430422][T27197] usb 4-1: USB disconnect, device number 102 13:03:56 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:03:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd77, 0x0, 0x0) 13:03:56 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:56 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r0}]}, 0x28}], 0x1}, 0x0) 13:03:56 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000007003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1567.980622][T27197] usb 1-1: USB disconnect, device number 67 13:03:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x7}, 0x40) 13:03:56 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:03:56 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:03:56 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0x0, 0xc, 0x0, 0x0) 13:03:56 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000008003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:03:56 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1568.363851][ T902] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1568.533807][T27197] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1568.633657][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1568.933686][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1568.942749][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.952555][T27197] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1568.963028][T27197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1568.977944][ T902] usb 4-1: Product: syz [ 1568.982131][ T902] usb 4-1: Manufacturer: syz [ 1568.987930][ T902] usb 4-1: SerialNumber: syz [ 1569.001179][ T902] usb 4-1: config 0 descriptor?? [ 1569.153627][T27197] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1569.162812][T27197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.172364][T27197] usb 1-1: Product: syz [ 1569.177026][T27197] usb 1-1: Manufacturer: syz [ 1569.181636][T27197] usb 1-1: SerialNumber: syz [ 1569.238938][T27197] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1569.893651][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1569.903190][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1569.912768][T27197] usb 1-1: ath9k_htc: USB layer deinitialized [ 1569.933700][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1569.952034][ T902] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1569.962450][ T902] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1569.987557][ T902] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1570.005247][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1571.150552][ T902] usb 4-1: USB disconnect, device number 103 13:04:00 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:00 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000100)) 13:04:00 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000009003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1571.679932][ T902] usb 1-1: USB disconnect, device number 68 13:04:00 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:00 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b46, 0x11f, 0x0, 0x0, 0x0) 13:04:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x34}, [@ldst={0x7, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 13:04:00 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000000000c003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1572.013416][ T8495] usb 4-1: new high-speed USB device number 104 using dummy_hcd 13:04:00 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x0, 0x11f, 0x0, 0x0, 0x0) [ 1572.203389][ T902] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1572.263494][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1572.543790][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1572.552839][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.569417][ T8495] usb 4-1: Product: syz [ 1572.573724][ T8495] usb 4-1: Manufacturer: syz [ 1572.578330][ T8495] usb 4-1: SerialNumber: syz [ 1572.589358][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1572.599764][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1572.614005][ T8495] usb 4-1: config 0 descriptor?? [ 1572.783483][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1572.792564][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.800779][ T902] usb 1-1: Product: syz [ 1572.805108][ T902] usb 1-1: Manufacturer: syz [ 1572.809710][ T902] usb 1-1: SerialNumber: syz [ 1572.854346][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1573.423404][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1573.432811][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1573.441028][T27197] usb 1-1: ath9k_htc: USB layer deinitialized [ 1573.533583][ T8495] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1573.547067][ T8495] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1573.556942][ T8495] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1573.582244][ T8495] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1573.608967][ T8495] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1574.750075][T27197] usb 4-1: USB disconnect, device number 104 13:04:03 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:03 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:03 executing program 1: io_uring_setup(0x4f6a, &(0x7f0000000000)={0x0, 0xda30, 0x8}) 13:04:03 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000000000000f003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:03 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x0, 0x11f, 0x0, 0x0, 0x0) 13:04:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1575.218906][T27197] usb 1-1: USB disconnect, device number 69 13:04:03 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:03 executing program 1: r0 = fork() waitid(0x1, r0, 0x0, 0x8, 0x0) 13:04:03 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x0, 0x11f, 0x0, 0x0, 0x0) 13:04:03 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000020003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:04 executing program 4: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000580)=""/229, 0xe5}, 0x0) io_uring_enter(r1, 0x6b46, 0x0, 0x0, 0x0, 0x0) [ 1575.623456][T27691] usb 4-1: new high-speed USB device number 105 using dummy_hcd 13:04:04 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1575.783429][T27197] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1575.878614][T27691] usb 4-1: Using ep0 maxpacket: 8 [ 1576.163887][T27691] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1576.172960][T27691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.187662][T27691] usb 4-1: Product: syz [ 1576.191842][T27691] usb 4-1: Manufacturer: syz [ 1576.197944][T27691] usb 4-1: SerialNumber: syz [ 1576.210224][T27197] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1576.210665][T27691] usb 4-1: config 0 descriptor?? [ 1576.231118][T27197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1576.453465][T27197] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1576.462639][T27197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.470782][T27197] usb 1-1: Product: syz [ 1576.477558][T27197] usb 1-1: Manufacturer: syz [ 1576.482177][T27197] usb 1-1: SerialNumber: syz [ 1576.524407][T27197] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1577.133323][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1577.144040][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1577.150761][T27197] usb 1-1: ath9k_htc: USB layer deinitialized [ 1577.153391][T27691] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1577.178158][T27691] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1577.188173][T27691] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1577.209297][T27691] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1577.228207][T27691] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1578.379720][ T8495] usb 4-1: USB disconnect, device number 105 13:04:07 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:07 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000040003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:07 executing program 4: r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0) 13:04:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8947, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:04:07 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1578.911145][ T8495] usb 1-1: USB disconnect, device number 70 13:04:07 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 13:04:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:04:07 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:07 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) 13:04:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000041003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:07 executing program 4: creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)={[{}], [{@appraise_type}]}) [ 1579.273372][T27197] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1579.373310][ T8495] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1579.533119][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1579.733375][ T8495] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1579.743713][ T8495] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1579.823366][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1579.832451][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.842710][T27197] usb 4-1: Product: syz [ 1579.848360][T27197] usb 4-1: Manufacturer: syz [ 1579.853455][T27197] usb 4-1: SerialNumber: syz [ 1579.859780][T27197] usb 4-1: config 0 descriptor?? [ 1579.950381][ T8495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1579.959771][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.973832][ T8495] usb 1-1: Product: syz [ 1579.978066][ T8495] usb 1-1: Manufacturer: syz [ 1579.982645][ T8495] usb 1-1: SerialNumber: syz [ 1580.044247][ T8495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1580.653130][ T8495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1580.662707][ T8495] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1580.675473][ T8495] usb 1-1: ath9k_htc: USB layer deinitialized [ 1580.793338][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1580.808240][T27197] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1580.818112][T27197] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1580.844623][T27197] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1580.866567][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1582.008036][ T8495] usb 4-1: USB disconnect, device number 106 13:04:10 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:10 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:10 executing program 4: bpf$BPF_TASK_FD_QUERY(0xe, 0x0, 0x0) 13:04:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) 13:04:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000b43003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:10 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1582.453387][ T902] usb 1-1: USB disconnect, device number 71 13:04:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x401}, 0x14}}, 0x0) 13:04:11 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8946, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @local}}) 13:04:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x96, &(0x7f0000000180)=""/150, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, 0x0}, 0x74) 13:04:11 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000060003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5411, &(0x7f00000001c0)={'sit0\x00', 0x0}) [ 1582.842140][ T8495] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1582.952898][ T902] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1583.122979][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1583.323008][ T902] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1583.323063][ T902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1583.413574][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1583.422753][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.432696][ T8495] usb 4-1: Product: syz [ 1583.438206][ T8495] usb 4-1: Manufacturer: syz [ 1583.444084][ T8495] usb 4-1: SerialNumber: syz [ 1583.452678][ T8495] usb 4-1: config 0 descriptor?? [ 1583.483110][ T902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1583.493155][ T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.501239][ T902] usb 1-1: Product: syz [ 1583.509348][ T902] usb 1-1: Manufacturer: syz [ 1583.522979][ T902] usb 1-1: SerialNumber: syz [ 1583.563840][ T902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1584.132980][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1584.145916][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1584.152445][T27197] usb 1-1: ath9k_htc: USB layer deinitialized [ 1584.383069][ T8495] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1584.394060][ T8495] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1584.412157][ T8495] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1584.437102][ T8495] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1584.460073][ T8495] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1585.601329][T27197] usb 4-1: USB disconnect, device number 107 13:04:14 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:14 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:14 executing program 1: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)) 13:04:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x40) 13:04:14 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000ffff8e88003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1585.941736][T27691] usb 1-1: USB disconnect, device number 72 13:04:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x15, 0x0, 0x0) 13:04:14 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:14 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x20) 13:04:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa12553807f67c8d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:14 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000ffffff9e003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:14 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1586.283051][ T1274] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1586.437331][T27691] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1586.522791][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1586.803078][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1586.813954][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1586.827565][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1586.837110][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.845727][ T1274] usb 4-1: Product: syz [ 1586.850920][ T1274] usb 4-1: Manufacturer: syz [ 1586.856417][ T1274] usb 4-1: SerialNumber: syz [ 1586.868081][ T1274] usb 4-1: config 0 descriptor?? [ 1587.022949][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1587.032094][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.040604][T27691] usb 1-1: Product: syz [ 1587.045267][T27691] usb 1-1: Manufacturer: syz [ 1587.049888][T27691] usb 1-1: SerialNumber: syz [ 1587.104357][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1587.702805][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1587.712360][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1587.720255][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1587.783004][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1587.797212][ T1274] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1587.806953][ T1274] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1587.831199][ T1274] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1587.849134][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1589.002812][T27197] usb 4-1: USB disconnect, device number 108 13:04:17 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:17 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x11, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 13:04:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000008000000000000020000008510"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xe6, &(0x7f00000002c0)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:17 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:17 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000ffffffef003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB='@\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1589.480313][T27691] usb 1-1: USB disconnect, device number 73 13:04:18 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:18 executing program 1: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{}]}) 13:04:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 13:04:18 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000fffffff0003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:18 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1589.852820][ T8560] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1590.022663][T27691] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1590.122758][ T8560] usb 4-1: Using ep0 maxpacket: 8 [ 1590.412672][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1590.423106][ T8560] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1590.432239][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1590.446082][ T8560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.454273][ T8560] usb 4-1: Product: syz [ 1590.458654][ T8560] usb 4-1: Manufacturer: syz [ 1590.463542][ T8560] usb 4-1: SerialNumber: syz [ 1590.471099][ T8560] usb 4-1: config 0 descriptor?? [ 1590.612899][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1590.622146][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.638656][T27691] usb 1-1: Product: syz [ 1590.643030][T27691] usb 1-1: Manufacturer: syz [ 1590.647635][T27691] usb 1-1: SerialNumber: syz [ 1590.694115][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1591.272707][T27691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1591.282337][T27691] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1591.290792][T27691] usb 1-1: ath9k_htc: USB layer deinitialized [ 1591.392692][ T8560] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1591.402866][ T8560] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1591.412819][ T8560] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1591.435073][ T8560] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1591.452189][ T8560] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1592.607546][ T8560] usb 4-1: USB disconnect, device number 109 13:04:21 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:21 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5452, &(0x7f0000000080)={'sit0\x00', 0x0}) 13:04:21 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)=[{0x20, 0x0, 0x0, "0a524c34277cb1ccde6991d6be0e1fd708"}], 0x20}, 0x0) 13:04:21 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000fffffffc003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB='@\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1593.057361][ T20] usb 1-1: USB disconnect, device number 74 13:04:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x8, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 13:04:21 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8982, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:04:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000888effff003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8c4, 0xffffffffffffffff, 0x35c0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x40) 13:04:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x284, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@set={{0x40}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e0) [ 1593.402902][ T8495] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1593.679666][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1593.684860][ T20] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1594.002674][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1594.011759][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.023104][ T8495] usb 4-1: Product: syz [ 1594.027304][ T8495] usb 4-1: Manufacturer: syz [ 1594.031908][ T8495] usb 4-1: SerialNumber: syz [ 1594.040345][ T8495] usb 4-1: config 0 descriptor?? [ 1594.084791][ T20] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1594.095601][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1594.282592][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1594.291672][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.302424][ T20] usb 1-1: Product: syz [ 1594.306609][ T20] usb 1-1: Manufacturer: syz [ 1594.311255][ T20] usb 1-1: SerialNumber: syz [ 1594.373878][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1594.972652][ T8495] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1594.985727][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1594.995466][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1595.002193][ T20] usb 1-1: ath9k_htc: USB layer deinitialized [ 1595.018466][ T8495] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1595.028434][ T8495] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1595.064969][ T8495] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1595.084361][ T8495] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1596.197228][T27691] usb 4-1: USB disconnect, device number 110 13:04:25 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:25 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x890b, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:04:25 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000007fffffff003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="d6", 0x1) 13:04:25 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB='@\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1596.768513][ T20] usb 1-1: USB disconnect, device number 75 13:04:25 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0x0, 0x14, 0x0, 0x0) 13:04:25 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5391}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) 13:04:25 executing program 4: bpf$BPF_TASK_FD_QUERY(0x1d, 0x0, 0x0) 13:04:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x20}, 0x40) 13:04:25 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1597.173229][ T8495] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1597.252268][ T20] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1597.422300][ T8495] usb 4-1: Using ep0 maxpacket: 8 [ 1597.622508][ T20] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1597.632788][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1597.703338][ T8495] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1597.713396][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.721503][ T8495] usb 4-1: Product: syz [ 1597.727760][ T8495] usb 4-1: Manufacturer: syz [ 1597.732926][ T8495] usb 4-1: SerialNumber: syz [ 1597.739120][ T8495] usb 4-1: config 0 descriptor?? [ 1597.802690][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1597.814391][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.823591][ T20] usb 1-1: Product: syz [ 1597.827783][ T20] usb 1-1: Manufacturer: syz [ 1597.832934][ T20] usb 1-1: SerialNumber: syz [ 1597.883527][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1598.452373][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1598.466445][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1598.473319][ T20] usb 1-1: ath9k_htc: USB layer deinitialized [ 1598.662446][ T8495] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in cold state [ 1598.672033][ T8495] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1598.688830][ T8495] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1598.714095][ T8495] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1598.745459][ T8495] dvb_usb_az6007: probe of 4-1:0.0 failed with error -2 [ 1599.878554][T27691] usb 4-1: USB disconnect, device number 111 13:04:28 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:04:28 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @host}, 0x10) 13:04:28 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01000000009effffff003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:28 executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 13:04:28 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1600.238948][T27691] usb 1-1: USB disconnect, device number 76 13:04:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x36c, 0x0, 0xd4, 0xffffffff, 0xd4, 0x18c, 0x3a4, 0x3a4, 0xffffffff, 0x3a4, 0x3a4, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'sit0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "12065c50cde2a4d214cecbd63faa9e5d48094f838952acac3aa568bc4790"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private2}}}, {{@ip={@local, @private, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv4=@empty}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'wg1\x00', 'team0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@local, @port, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c8) 13:04:28 executing program 1: creat(&(0x7f0000000480)='./file0\x00', 0x0) fork() sched_rr_get_interval(0x0, &(0x7f0000001100)) 13:04:28 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:29 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x142) 13:04:29 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000efffffff003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1600.633038][ T1274] usb 4-1: new high-speed USB device number 112 using dummy_hcd 13:04:29 executing program 4: creat(&(0x7f0000000080)='./file0/file0\x00', 0x9d) getuid() getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000200)}, {0x0, 0x0, 0x4}, {&(0x7f0000000340)="d92126053676b781b75baba35c62d4", 0xf, 0x7}, {&(0x7f0000000380)="1b4ce9d26bbf836c4c691ba742ae0851362acefc5758832f6656b21bdef60e8ebf07fc92c5f3d44feb393550187febceef2c63909a49732783635e80374f5db06420c070a3b4bb5ad20cf7c12b5134332b02dd585f83753dc00db56dffc88bca1fbb0c3af10f7b892d1b5637232f64475a74b361fff40be7696a443adc7571f6044070fa8e7de752bcc2c72e6ed379", 0x8f, 0x9b}, {&(0x7f0000000880)="6584424081d60adda7cb857e29fa4e5c1b2364b45420052dc308506137afad96dc8c47a762147edd6945aa797bc60fb61160348f1864bf1aff97a45b176c072836c3f5e4c821da2e554f4d4733b7df1aa9fc13bf7843a51516660a534694502df9c84192b0533ca7b3add8012d74936a413e34b47e878ffa3657c4c0bd3c0006fc77e1a1185018c5", 0x88, 0x80}], 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)={[{}], [{@appraise_type}, {@hash}]}) [ 1600.802593][T27691] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1600.922337][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1601.193071][T27691] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1601.203486][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1601.233215][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1601.242526][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.250519][ T1274] usb 4-1: Product: syz [ 1601.256617][ T1274] usb 4-1: Manufacturer: syz [ 1601.261216][ T1274] usb 4-1: SerialNumber: syz [ 1601.268699][ T1274] usb 4-1: config 0 descriptor?? [ 1601.372372][T27691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1601.381445][T27691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.390761][T27691] usb 1-1: Product: syz [ 1601.395084][T27691] usb 1-1: Manufacturer: syz [ 1601.399724][T27691] usb 1-1: SerialNumber: syz [ 1601.443407][T27691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1601.532322][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1602.012308][ T8560] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1602.021909][ T8560] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1602.034486][ T8560] usb 1-1: ath9k_htc: USB layer deinitialized 13:04:32 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:04:32 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xf}, 0x40) 13:04:32 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000f0ffffff003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5452, 0x0) [ 1603.582103][ T1274] usb write operation failed. (-71) [ 1603.594026][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1603.613959][T27197] usb 1-1: USB disconnect, device number 77 [ 1603.674391][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1603.723427][ T1274] usb 4-1: media controller created [ 1603.768395][ T1274] usb read operation failed. (-71) [ 1603.832212][ T1274] usb write operation failed. (-71) 13:04:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:32 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)="ab", 0x1, 0xfffffffffffffffe) 13:04:32 executing program 1: openat$tun(0xffffff9c, &(0x7f0000000000), 0x315400, 0x0) 13:04:32 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1603.865731][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1603.921185][ T1274] usb 4-1: USB disconnect, device number 112 13:04:32 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000fcffffff003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x24, &(0x7f0000000340)=0x3bca, 0x4) 13:04:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x40) [ 1604.182322][T27197] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1604.402129][ T1274] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1604.542134][T27197] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1604.552669][T27197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1604.641942][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1604.722131][T27197] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1604.731303][T27197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.739858][T27197] usb 1-1: Product: syz [ 1604.744521][T27197] usb 1-1: Manufacturer: syz [ 1604.749248][T27197] usb 1-1: SerialNumber: syz [ 1604.792876][T27197] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1604.942122][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1604.951186][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.961160][ T1274] usb 4-1: Product: syz [ 1604.966608][ T1274] usb 4-1: Manufacturer: syz [ 1604.971216][ T1274] usb 4-1: SerialNumber: syz [ 1604.982831][ T1274] usb 4-1: config 0 descriptor?? [ 1605.252059][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1605.371993][T27197] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1605.383123][T27197] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1605.390258][T27197] usb 1-1: ath9k_htc: USB layer deinitialized 13:04:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000100)=@generic={0x0, 0x0, 0x39, "dfff672f", "cfa0627e3f7724fd93496a5d8be463fcc823a829661aeabb94619da138c17ca4b29272e76e4a811b7ac4a4d885c5c4125e91cfd58b5fbbea29"}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:04:35 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x894c, 0x0) 13:04:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:35 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000020000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1606.963247][ T20] usb 1-1: USB disconnect, device number 78 [ 1607.114060][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.120436][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.257975][ T1274] usb write operation failed. (-71) [ 1607.282728][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1607.323315][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1607.343148][ T1274] usb 4-1: media controller created [ 1607.361904][ T1274] usb read operation failed. (-71) [ 1607.382221][ T1274] usb write operation failed. (-71) [ 1607.389227][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1607.401518][ T1274] usb 4-1: USB disconnect, device number 113 13:04:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:35 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000140)=0x24) 13:04:35 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000030000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1607.481898][ T20] usb 1-1: new high-speed USB device number 79 using dummy_hcd 13:04:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000406010700000000000000000a00000709"], 0x58}}, 0x0) 13:04:36 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1607.784524][ T460] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1607.882347][ T20] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1607.903292][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1607.931871][T27197] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1608.107263][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1608.116684][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.130620][ T20] usb 1-1: Product: syz [ 1608.135077][ T20] usb 1-1: Manufacturer: syz [ 1608.139738][ T20] usb 1-1: SerialNumber: syz [ 1608.171931][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1608.193228][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1608.502003][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1608.511207][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.520079][T27197] usb 4-1: Product: syz [ 1608.525197][T27197] usb 4-1: Manufacturer: syz [ 1608.529945][T27197] usb 4-1: SerialNumber: syz [ 1608.537057][T27197] usb 4-1: config 0 descriptor?? [ 1608.811900][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1608.831986][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1608.841580][ T20] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1608.849617][ T20] usb 1-1: ath9k_htc: USB layer deinitialized 13:04:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000040000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x22, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x208, 0x140, 0x208, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) 13:04:38 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="d60f532dcf5385b5d1613c47f9179449", 0x10) 13:04:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)={[{}], [{@fsname={'fsname', 0x3d, '&['}}]}) [ 1610.427428][ T902] usb 1-1: USB disconnect, device number 79 [ 1610.831951][T27197] usb write operation failed. (-71) [ 1610.839314][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1610.851221][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1610.868869][T27197] usb 4-1: media controller created [ 1610.913943][T27197] usb read operation failed. (-71) [ 1610.941796][T27197] usb write operation failed. (-71) [ 1610.949502][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1610.961513][T27197] usb 4-1: USB disconnect, device number 114 13:04:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @nl, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @xdp, 0x200}) 13:04:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:39 executing program 1: creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000076240)={0x0, [], 0x0, "da6d87c98143d9"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000700)="630144d272964f2b6410ddf1ad5babee87d8d2d7a1618856b117bf2455af1345f90e307940a7ab53a80aa839b6d08c40134df5bcbfe307b2bc8bf374b1f5ab8e9e449d287279d423753666962cc416ad4f129392ec03e4043c4e178959257439090bd07521ce014b6903321507d72531ef2889af73946dfdc4b42e456b1b73878d0fc5c7ce887753cd4a313020afc42870202432c3e2a803cd33322b5c1e6a0965490f6a4b3d2e015a9614eb3ba8668b2e6d3c4ba99be572a8407c705d0b7cfefa1cf7cdbfa6780aad370c3d8aaad5592c4b189291eb4a6ae41f0c", 0xdb, 0xfffeffff}, {&(0x7f00000005c0)="c7b2b83ffb9f4fc0261dbded8acbcad9deee7392dd0d090f97690c4f63f15eaf3eb8983b9894b57d8170a35787bf55b304c89180c54af6ae2d25939a028c196af656fe77a4992783c32bd18ee5df26271589b066d53b1d04cf03efa1f1952e90d37a0ee25cd53a7828262f55bd7f1eb1663944bdc7ae10e1946c176f0a73cd81ce9b2b9590f4a3912fe7473998671aaa0e06cff7e9ae77c300ece059ce7a7a8f86c8d418e468ac6e7f952a223b504a8ced4af823508e1f1736261eb11e6df15789bd435e765c2ca70af57d823095f9727c9f332ddc01951718d30f0409a112cce5d7d624f10e2891b568d149ae6e6b1cae228892b8894a128ff8971f3697bf477e441c069b48af167a", 0x25, 0xf893}, {&(0x7f00000001c0)="c15d28e834899572cc52bf34eb6515fabc1b37e8120ae64c7c02fa7b740544c589e3f49c500c874dcfb7e428fdd8a44d08634d55a5d3e72fd2c1b4b6667251ee6448b0ae285b4a37989c4a7114c8389990888c0f5e1a49c9faba749d8713f616b58317749068182918f0b143a522005f6f6e3937092b682916c3ad6fb3e3f65e5197a358b2a1b43a6bbe7ba79525429fe69a4acbedf3edc9819bcc13eae0d15f34a89f6cfbb2a69d2ec742dc3f6fdbbe5c1a4e2332f06e8c55258e6aa93359a0cd634f36de5aa515645e17e50184bc7208", 0xd1, 0x4}, {&(0x7f00000002c0)="252d778900000000c558db3b901b9b1f38a6ca1712364e6f5cc9a78dda896c6a6452b1cc5c66a61583690b3bd9bb4fabd089763ce54f67f4e88e42e001898800"/75, 0x4b, 0x1}, {&(0x7f0000000340)="2f0b359d33e19f9f39edb8", 0xb, 0x20}, {&(0x7f0000000380)="93ee3ca8214a5db57af2e5c757e692ca7396c1d6df00d98d6c272845f7f55f9ca00a7032e914650f3209ed4f6a9d3cd6112690f62ac3c83872c062cec03e84", 0x3f, 0x3}, {&(0x7f00000003c0)="e9c5b65c9dc7b859fd52279387c410777b27d81ad198829155e537d631d29d2fcf2a410453dbc0404df3eca2d45677a1b864b5d9b3369f680e2e97646dd0aebb21", 0xffffffffffffffaf, 0x1}, {&(0x7f0000000440)="f2", 0x1, 0x670}], 0x2003001, &(0x7f0000000540)=ANY=[@ANYBLOB="6d61616e6d7574653d2c962c7b5e272c00"/27]) 13:04:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 13:04:39 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000050000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd}, 0x40) 13:04:39 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 13:04:39 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000440)=[{&(0x7f00000004c0)="70188d2c05f0abb99877f65526a1cc216c71ed6cde1ff4670d4f5af496acabdf72f619c68b0d4af3579ff78ba8b3dd6dcc71d5e9d3064eb307b761719316a93e7b2680fac1932e4f57824d6ab011ab83fb2d98010ea72339ff69097cc51a8a93faada54de8a5f5c0d5a07844123ddb7d587bd3378b0f87b14a78d9cb68490dbdd7e23bfbad7c1c6d38bfac91d5beb904518d4d580db9ee49", 0x98, 0xb9}, {&(0x7f00000001c0)="bfaa143fdc6aac5b202c3dd99f66ad9f146fbe51cc7f46e27d0b3ff2f90215", 0x1f, 0x1}, {&(0x7f0000000180)}, {&(0x7f0000000240)="b9eeb1431dceb3cb77fce4e1aba43a193cc6d04dfb562793424d3c2caac40ca4af21da7f9d91506fc5d7d00aebbd95b96047e4c72362c4e0999bbcdda413b5f598d051ceca6bdabf5bd87053169393da855723998221c882f5f6a9fe4923ee71c0d68d2130dc54e6ddcf80e1e1a0a708e2d98a4e9f8ad986ecb243f59ed12db945cc7107cc0758e8549896256d3ba1332420babc683a8b73c62c8d9ea59cd8d1303c32530347a7cf42c20f693637c6c7362fcca96a50650a751dd66b0207e70a1e9faf8ae36fd5eee66b9911a7a2b01e29dc4e", 0xdc, 0x9}, {&(0x7f0000000180)="d92126053676b781b75baba35c62d4432a6ce23bd031981dc534e7da00"/40, 0x28, 0x7}, {&(0x7f0000000380)="1b4ce9d26bbf836c4c691ba742ae0851362acefc5758832f6656b21bdef60e8ebf07fc92c5f3d44feb393550187febceef2c63909a49732783635e80374f5db06420c070a3b4bb5ad20cf7c12b5134332b02dd585f83753dc00db56dffc88bca1fbb0c3af10f7b892d1b5637232f64475a74b361fff40be7696a443adc7571f6044070fa8e7de752bcc2c72e6ed37955c68602048d300840732121244a517b4ac74a02bd604d3aff6f3a4eb81d13a493390b189fafb9036dc2d78e6a82ab", 0xfffffffffffffebd, 0x9b}], 0xc000, &(0x7f0000000680)={[{@journal_async_commit}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@journal_dev}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nojournal_checksum}], [{@obj_type={'obj_type', 0x3d, 'measure'}}, {@uid_eq}, {@measure}]}) 13:04:39 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x18, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 13:04:39 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) [ 1611.571756][T27197] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1611.821829][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1612.142280][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1612.151834][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.160328][T27197] usb 4-1: Product: syz [ 1612.167873][T27197] usb 4-1: Manufacturer: syz [ 1612.174204][T27197] usb 4-1: SerialNumber: syz [ 1612.190077][T27197] usb 4-1: config 0 descriptor?? [ 1612.461802][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1614.481614][T27197] usb write operation failed. (-71) [ 1614.494193][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1614.515762][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1614.529090][T27197] usb 4-1: media controller created [ 1614.554554][T27197] usb read operation failed. (-71) [ 1614.571784][T27197] usb write operation failed. (-71) [ 1614.578696][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1614.590424][T27197] usb 4-1: USB disconnect, device number 115 13:04:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:43 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000060000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:43 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:43 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 13:04:43 executing program 1: pipe2$9p(0x0, 0xc4800) 13:04:43 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0x0, 0x32, 0x0, 0x0) 13:04:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89b1, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:04:43 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x208, 0x140, 0x208, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) 13:04:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x12, 0x0, 0x0) 13:04:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x9, 0x5, &(0x7f0000000080)=@framed={{}, [@func, @func]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:43 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000070000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1615.191883][ T20] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1615.471502][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 1615.782418][ T20] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1615.791650][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.799827][ T20] usb 4-1: Product: syz [ 1615.806234][ T20] usb 4-1: Manufacturer: syz [ 1615.810860][ T20] usb 4-1: SerialNumber: syz [ 1615.819316][ T20] usb 4-1: config 0 descriptor?? [ 1616.081702][ T20] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1618.091479][ T20] usb write operation failed. (-71) [ 1618.099505][ T20] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1618.124836][ T20] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1618.135306][ T20] usb 4-1: media controller created [ 1618.151470][ T20] usb read operation failed. (-71) [ 1618.171558][ T20] usb write operation failed. (-71) [ 1618.178477][ T20] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1618.190596][ T20] usb 4-1: USB disconnect, device number 116 13:04:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0xaa, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x0) 13:04:46 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) 13:04:46 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0x0, 0x7, 0x0, 0x0) 13:04:46 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000080000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1618.471644][ C1] sd 0:0:1:0: tag#5055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1618.481645][ C1] sd 0:0:1:0: tag#5055 CDB: opcode=0xe5 (vendor) [ 1618.487999][ C1] sd 0:0:1:0: tag#5055 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1618.497126][ C1] sd 0:0:1:0: tag#5055 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1618.506216][ C1] sd 0:0:1:0: tag#5055 CDB[20]: ba 13:04:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8924, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:04:47 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x5, 0x0, 0x7fff}, 0x40) 13:04:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000100)) 13:04:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) 13:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 1618.811625][ T902] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1618.925487][ C1] sd 0:0:1:0: tag#4992 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1618.935432][ C1] sd 0:0:1:0: tag#4992 CDB: opcode=0xe5 (vendor) [ 1618.941869][ C1] sd 0:0:1:0: tag#4992 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1618.950924][ C1] sd 0:0:1:0: tag#4992 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1618.960042][ C1] sd 0:0:1:0: tag#4992 CDB[20]: ba [ 1619.141410][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1619.421487][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1619.435235][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.451397][ T902] usb 4-1: Product: syz [ 1619.460195][ T902] usb 4-1: Manufacturer: syz [ 1619.470666][ T902] usb 4-1: SerialNumber: syz [ 1619.484224][ T902] usb 4-1: config 0 descriptor?? [ 1619.759663][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1621.812658][ T902] usb write operation failed. (-71) [ 1621.824824][ T902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1621.837890][ T902] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1621.847219][ T902] usb 4-1: media controller created [ 1621.871334][ T902] usb read operation failed. (-71) [ 1621.891378][ T902] usb write operation failed. (-71) [ 1621.898387][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1621.909724][ T902] usb 4-1: USB disconnect, device number 117 13:04:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:50 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:50 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000090000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x5, 0x0, 0x0) 13:04:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) 13:04:50 executing program 1: open(&(0x7f0000000080)='\x00', 0x0, 0x0) 13:04:50 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8940, 0x0) [ 1622.226205][ C0] sd 0:0:1:0: tag#4996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1622.236152][ C0] sd 0:0:1:0: tag#4996 CDB: opcode=0xe5 (vendor) [ 1622.242601][ C0] sd 0:0:1:0: tag#4996 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1622.252432][ C0] sd 0:0:1:0: tag#4996 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1622.261534][ C0] sd 0:0:1:0: tag#4996 CDB[20]: ba 13:04:50 executing program 1: io_uring_setup(0x77e2, &(0x7f0000000080)={0x0, 0x0, 0x2}) 13:04:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) 13:04:50 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8922, &(0x7f00000001c0)={'sit0\x00', 0x0}) [ 1622.482070][ T902] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1622.500435][ C0] sd 0:0:1:0: tag#4997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1622.510373][ C0] sd 0:0:1:0: tag#4997 CDB: opcode=0xe5 (vendor) [ 1622.516815][ C0] sd 0:0:1:0: tag#4997 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1622.525951][ C0] sd 0:0:1:0: tag#4997 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1622.535090][ C0] sd 0:0:1:0: tag#4997 CDB[20]: ba [ 1622.634353][ T743] sit0: mtu less than device minimum [ 1622.791210][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1623.081319][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1623.090421][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.099281][ T902] usb 4-1: Product: syz [ 1623.103547][ T902] usb 4-1: Manufacturer: syz [ 1623.108386][ T902] usb 4-1: SerialNumber: syz [ 1623.115182][ T902] usb 4-1: config 0 descriptor?? [ 1623.361400][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1625.381268][ T902] usb write operation failed. (-71) [ 1625.394279][ T902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1625.413873][ T902] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1625.431730][ T902] usb 4-1: media controller created [ 1625.451270][ T902] usb read operation failed. (-71) [ 1625.472583][ T902] usb write operation failed. (-71) [ 1625.479847][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1625.497700][ T902] usb 4-1: USB disconnect, device number 118 13:04:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:54 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000000c0000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:54 executing program 4: open(0x0, 0x412200, 0x0) 13:04:54 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) lseek(r0, 0xffffffc0, 0x1) 13:04:54 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xc, &(0x7f0000000340), 0x4) 13:04:54 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB]) 13:04:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4cad10bc1b705c34, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:54 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) [ 1625.860114][ T785] 9pnet: Insufficient options for proto=fd 13:04:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call, @exit], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 13:04:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @local}}) [ 1626.026917][ T902] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1626.281026][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1626.581420][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1626.590688][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.601320][ T902] usb 4-1: Product: syz [ 1626.605601][ T902] usb 4-1: Manufacturer: syz [ 1626.610367][ T902] usb 4-1: SerialNumber: syz [ 1626.628542][ T902] usb 4-1: config 0 descriptor?? [ 1626.901089][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1628.951304][ T902] usb write operation failed. (-71) [ 1628.958706][ T902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1628.969291][ T902] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1628.979670][ T902] usb 4-1: media controller created [ 1629.011101][ T902] usb read operation failed. (-71) [ 1629.041116][ T902] usb write operation failed. (-71) [ 1629.048374][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1629.059394][ T902] usb 4-1: USB disconnect, device number 119 13:04:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:04:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000000f0000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) 13:04:57 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r0, 0x0, &(0x7f0000000100)) 13:04:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x438, 0x0, 0xd4, 0xffffffff, 0xd4, 0x18c, 0x3a4, 0x3a4, 0xffffffff, 0x3a4, 0x3a4, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0x0, 'sit0\x00', 'netpci0\x00'}, 0x0, 0x94, 0xd4, 0x0, {}, [@common=@icmp={{0x24}, {0x0, "8187"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "12065c50cde2a4d214cecbd63faa9e5d48094f838952acac3aa568bc4790"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private2, @port, @port=0x4e24}}}, {{@ip={@local, @private, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dummy0\x00', 'vlan1\x00'}}, @common=@set={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv4=@empty}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'wg1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x3, @ipv4=@private, @ipv4=@local, @port, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x494) 13:04:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2, 0x40, 0x0, 0x0) 13:04:57 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:04:57 executing program 1: openat$tun(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) 13:04:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) write(r0, &(0x7f0000000080)="90", 0x1) 13:04:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000410000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:04:58 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)=')', 0x1}, {&(0x7f0000001680)="fb", 0x1}, {&(0x7f0000000880)="a4", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004840)=[{0x10, 0x0, 0x0, '\n'}, {0xc}], 0x1c}, 0x0) [ 1629.701798][ T902] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1629.981017][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1630.281020][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1630.290081][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.298658][ T902] usb 4-1: Product: syz [ 1630.303274][ T902] usb 4-1: Manufacturer: syz [ 1630.307880][ T902] usb 4-1: SerialNumber: syz [ 1630.318349][ T902] usb 4-1: config 0 descriptor?? [ 1630.570928][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1632.602366][ T902] usb write operation failed. (-71) [ 1632.609524][ T902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1632.622474][ T902] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1632.631506][ T902] usb 4-1: media controller created [ 1632.650954][ T902] usb read operation failed. (-71) [ 1632.671033][ T902] usb write operation failed. (-71) [ 1632.678535][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1632.688788][ T902] usb 4-1: USB disconnect, device number 120 13:05:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x2, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:05:01 executing program 4: add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 13:05:01 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:01 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) kexec_load(0x0, 0x1, &(0x7f00000014c0)=[{0x0}], 0x2a0000) 13:05:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000600000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:01 executing program 4: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:05:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000005c0)="08cb13ff752fcd36f992800807a7e6c8", 0x10, 0x1}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000000340)) 13:05:01 executing program 1: bpf$BPF_TASK_FD_QUERY(0x17, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 13:05:01 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000300003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1633.170550][ T921] loop0: detected capacity change from 0 to 4 13:05:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x15, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x208, 0x140, 0x208, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) [ 1633.230562][ T921] FAT-fs (loop0): invalid media value (0x00) [ 1633.254438][ T921] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1633.273507][ T902] usb 4-1: new high-speed USB device number 121 using dummy_hcd 13:05:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000005c0)="08cb13ff752fcd36f992800807a7e6c8", 0x10, 0x1}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000000340)) 13:05:01 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:01 executing program 1: syz_mount_image$romfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)='ecryptfs\x00', 0x0, 0x0) [ 1633.521342][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 1633.584503][ T951] loop0: detected capacity change from 0 to 4 [ 1633.609775][ T951] FAT-fs (loop0): invalid media value (0x00) [ 1633.615568][ T954] Device name cannot be null; rc = [-22] [ 1633.647876][ T951] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1633.861005][ T902] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1633.870459][ T902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.879083][ T902] usb 4-1: Product: syz [ 1633.883660][ T902] usb 4-1: Manufacturer: syz [ 1633.889802][ T902] usb 4-1: SerialNumber: syz [ 1633.918171][ T902] usb 4-1: config 0 descriptor?? [ 1634.190801][ T902] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1636.200639][ T902] usb write operation failed. (-71) [ 1636.207926][ T902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1636.225110][ T902] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1636.237360][ T902] usb 4-1: media controller created [ 1636.270811][ T902] usb read operation failed. (-71) [ 1636.290792][ T902] usb write operation failed. (-71) [ 1636.297671][ T902] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1636.310694][ T902] usb 4-1: USB disconnect, device number 121 13:05:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000500003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:04 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000005c0)="08cb13ff752fcd36f992800807a7e6c8", 0x10, 0x1}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000000340)) 13:05:04 executing program 1: bpf$BPF_TASK_FD_QUERY(0xd, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 13:05:04 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) [ 1636.561184][ T987] loop0: detected capacity change from 0 to 4 13:05:05 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 13:05:05 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001a00)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@flowinfo={{0x10, 0x29, 0xb, 0x2}}, @flowinfo={{0x10, 0x29, 0xb, 0xffffffff}}], 0x20}}], 0x2, 0x0) [ 1636.638122][ T987] FAT-fs (loop0): invalid media value (0x00) [ 1636.678325][ T987] FAT-fs (loop0): Can't find a valid FAT filesystem 13:05:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000005c0)="08cb13ff752fcd36f992800807a7e6c8", 0x10, 0x1}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000000340)) 13:05:05 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0) 13:05:05 executing program 1: syz_emit_ethernet(0x16, &(0x7f0000000080)={@broadcast, @dev, @void, {@llc={0x4, {@snap={0x0, 0x0, 'D', "faae7e"}}}}}, 0x0) [ 1636.880881][ T1274] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1636.912822][ T1014] loop0: detected capacity change from 0 to 4 [ 1636.932618][ T1014] FAT-fs (loop0): invalid media value (0x00) [ 1636.940247][ T1014] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1637.190800][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1637.470744][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1637.479814][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.490046][ T1274] usb 4-1: Product: syz [ 1637.494768][ T1274] usb 4-1: Manufacturer: syz [ 1637.499385][ T1274] usb 4-1: SerialNumber: syz [ 1637.506117][ T1274] usb 4-1: config 0 descriptor?? [ 1637.780739][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1640.060522][ T1274] usb write operation failed. (-71) [ 1640.080894][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1640.092211][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1640.102768][ T1274] usb 4-1: media controller created [ 1640.120471][ T1274] usb read operation failed. (-71) [ 1640.140494][ T1274] usb write operation failed. (-71) [ 1640.147494][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1640.160473][ T1274] usb 4-1: USB disconnect, device number 122 13:05:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:08 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, 0x0, 0x0) 13:05:08 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000600003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}}, 0x0) 13:05:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8927, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:05:08 executing program 0: syz_emit_ethernet(0x15, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@x25}}, 0x0) 13:05:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) write(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7) 13:05:08 executing program 1: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) fork() sched_getparam(0x0, &(0x7f0000000140)) 13:05:08 executing program 4: r0 = creat(&(0x7f0000000480)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x8000000) 13:05:08 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, 0x0, 0x0) 13:05:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xffd0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fedbdf250f00000005000f000000000005000f000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600000000000000000005000f008100000007000300", @ANYRES32=0x0, @ANYBLOB="b8e48c6db8f05ac9510694e3ed6ab9363f67c7e668a0f26328a2f89f25d92c14b1ef2e5682a55f02dd7fd8c566a98f7a0369ce805ce658ddbb7a8dbe3305ea148b3d974e798430064702"], 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x8000) 13:05:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000700003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1640.700697][ T1274] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1640.940710][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1641.220558][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1641.230470][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.238535][ T1274] usb 4-1: Product: syz [ 1641.244520][ T1274] usb 4-1: Manufacturer: syz [ 1641.249213][ T1274] usb 4-1: SerialNumber: syz [ 1641.258288][ T1274] usb 4-1: config 0 descriptor?? [ 1641.520558][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1643.530360][ T1274] usb write operation failed. (-71) [ 1643.537499][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1643.563205][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1643.577522][ T1274] usb 4-1: media controller created [ 1643.600779][ T1274] usb read operation failed. (-71) [ 1643.622217][ T1274] usb write operation failed. (-71) [ 1643.631075][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1643.649610][ T1274] usb 4-1: USB disconnect, device number 123 13:05:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x1, 0x7fff}, 0x40) 13:05:12 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, 0x0, 0x0) 13:05:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x29, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x208, 0x140, 0x208, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) 13:05:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x1, 0x0, 0x0) 13:05:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000900003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:12 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) lsetxattr$security_capability(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000680), 0xc, 0x0) 13:05:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000580)=@newtfilter={0xec4, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x5}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_rsvp={{0x9}, {0xe84, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_ACT={0xe48, 0x6, [@m_skbedit={0xe44, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0xe15, 0x6, "3d6f4a522695973056f040064ffc940aea0613b735c09408729b1721b51333703823b577189c7bb33358bd94853c01110b8d5ed032a03b90e578e1eafe23b9513145b8ae3909d57692f29b7193199ac0dda2f50b728a47f7b0edc9e2ae25df6ad00321b5a62e88065db9fd6c0fc76d7c7a692162252ce46d6c10338c9f360a15de871dc067820413cf7fbcb2e4824505a07aa6de64becfa1e9d580e748dfe02112d6f10ac3202066d3ea18abd6993a0346e1b320c18c63777e4b6f789a405c0c3de7373b2a083da0329a5bbaa512607e1f27e63e7b15431e5232d17819ef5cba65ec0e5dce9462e2d7773ca8debca291773084a5d71b597e502891b91176d56266204d598bfbb8c88732b8b2d41b920441d28d849bd15c4e2d658a8fc7d0ea998a0f4fbefec1b8c7a9b1800f0f06a21536db7d1194816a67ab45789f04fb78384d519a6f02fdfa7ffcabe486771347539bf3fd54446b5ec1539ab5d45b830008fe3d37f451308edb3e235b8ae7ded7c3ea68f306ac85ee9eeefb46a03bc5b4b60ca381fcd74f2cd3b6d284c5fb6dde24a64370a7c66f79680973a051b3bea70f90b08eff8198ea0b911ce2d151429d7a4b96a083fd22f6bd28cf1030a606def546484ed747e1fb3210320285d689ed87124c76efe81133077300cef23903dfe1f8f9ece635f0b727dfa088335abf02fb23c0158c0a56757020cec8e8dfbe8be622e3cf31586f7d17de8654a05140acbab070093d7dcee2051f9bcb09003cf5a41dbb257724949537c67ce4cbccaab0d10a4347c1bfda3cbb711fa5fc3da8b47107f5a4b2464a9ad0e64e48af4389fef108fa90c72939b3b9e6a47348d6859f85c3e64524e9dc9bb5b193a005d1f08deb0f11f46cb5e63900775544109d1b4e10e69fe00ca3273922f6ac90ccdd3dd7c0446b73b39c13df124c97bc82e8b4bf0f695ff2aab19ce50c5ba5e4336b4e7e84b286bc018ac9909af85bfe90f731ad6d7d6c4b46b286295376253b1ff71482585f67ab74042b4f684343bea1bbe19fcb0e300ddd72ec24028630b2b3757f09805b9fd750a50592a1fc5f88d0123be115d214cad8ad2bbd495b38799f811ac2d1c8d50390bdbce6fc624effeee1ad4de9a2e8ab3445bb6e14a07a55711c60ba14cc04faa18d67b2e86a98f5fdbb296415be18a1155622bc1332adc884b8e03a2ba28c9a7ccd9fc9ebf97708592619eb641155541bc3e2023aeb9f5648646889e057516be1f6462bc81a3c2367d5bc8918fa5ed0f22d6eade2b1f7655317403085eb64b1748e0d8fe5676e4c94c855762411deda75b19693dcbd301d34962f085b0267b336150f5d39a6107940b76c577cc2e97b0d3218a4cebe53e5e66ecff498d67172f7cba024174fbdc676e5acca8ffbe06383c430fe053ac708ba0f9a05460f7fd7d34ceb552e76268266711c8f9a30ea9e59e98f1123bedf31d913b0b52cac7297c8fba3e8e5186c6920a55f10091a16ad4a72b9eff62e65d4d578cf345f3619d7944678c2e2156e6d8f75fc41b30eb8eb3091458e9188f2cb4fbdbd2488d6d3a4ac6ccc92dde1fb95a84344c75c0e71bdf3eb4bb7a8714d18599ad2d49cd41b92d2eaa5e721d6b7a95784590da79c7dc98f758b7df145ff07f012858d935b412090cd6a291f0257f4a3fccbb1387a9017f7bf28de7633af1e8f1dc6477e1ea2a604af644f7a813079f3b935b5cb42488c9d12b0c50fcd46154a314557668eb65530f46b181c2403648301bddfdb38b67e151f05c31ac4df89a3b4bd6c0ffa6f930096a4424b9df74af16fcfa96ea50129897032f7b0d35b5aeeb5efa14120ecec2922792a097fbc6f290bc01e3398f7b8494e24f65f0a538c613428b86f70c58bb275c122323aed078fb6189b439043f649806a7b4913c821e20e7e7c9d52e608903624e68bf010c2dd8a9ed3f79ca1ab52d82915ee165b9a17c205168f3211027bb0d1481af7713cfa06e7bc77848050d78d59ba879c2b29c5b73f6edaab961e56f72774e7893afdc319779b4cacfd5776b2897d5ccdcadbad8336f654c4140ce4968913d7ee3b0944a9092b58d373be6ae6b29f3b19d779de5c43150c1cad2982e33e79e04bf0aeeb06ba5d52c45fa9839fa14eca1389577bc33242cb3fe92b0c23afea2a89107351f82ae17eeed5e545962980ff7cba2be021772babd659383f99cd6b9ec14c9c125a0c6c632a9bfa1e41c748e85d65a3def80058f4a40bef84ea733c451cd0ca720dffb7b44fd44850e274c75dfa43a71729bc5eaac368174334d699f270952e92fe9e18ad88f13ff1204748a56b22ead58e40ca7f6a3469a7f5c10e2d5a7f7b4077d20e30a6e05c75359fc8767fcb47b5c93b47f3905b1496504f3bcff509bb9ec1f9f27c9296c6b09b85b8fcda558aba813dff722051aac34245675f5763721ef14a9304c58208f7304d3185250694a3177da500746645a810ced475f2c22ffd386aeab189e53c9e0d612fbedf53e0c071944eb994e5ef76edc8c15122082c5346756abd5b56e0eb3502251ddaa79f90183fa8002194d995aae6a30130f5aee516d6426df462f64bef5edd38e5d797cd57b273fb1980ccee895ae36cebc2e8a49cd8db91ab23210f8aae8e0024a6737e2f7a0eb224e3d4dff425bf6455453417e6d32b03acedf187752c876c4dcb83e4829fdf399a741a626b4a51c762da4bf596ac736377227eb8cbec201981e7e0b0682f427ff63192d23758d20264865bfdcd657fd73786a49501cc994f9717ebc91c3e9745629b27fdd48211a90c9c33155954359b13cca382ec57347dbaf27a352407d9c616c8fdb8c9786729f762019b8bd3f42981c43ed301ca5570a11b87e63ca6449648a83b33c58149b9f9dd16fa370de1fab7eb5ba2ff6b258e1cfeb5b08a3cc92fd2673b777449d91359e3eb499944987c73e0ffc0474921bdd9a9d40b282be35f1a1de4d989693e282993c39e88b504375ac2036b90d825f7f6423dabd7dfa31b7ad72f45be74d9171097f86ca910f8fc8709286b0974253b1f8126568e127f015ce52c8a55e1cb49b8eadddef0ef020ad494925c2ab333af2c05b943f6efa0186e67a7692b07313dea4c59eeb020e491533f827546feb5cd450c9e85b92b0f423f4ec9d96b9abf09e4c6a9ea6835eb1f37a28d47441d277ccbf772c15524d49fd07c739843fb858ffd3632f20833387fa6733d335791efe7f43e17cad7d2c68584955a8e233d9a4b7a5cba49e02f23d72d0f58d7b97e7e230e84989738367f014b61ae9ee867ca7df18f1da6fa1e418fb1da5f6cc4a6cefe1aee8703c63e450de2b9880f8e1bbf137f08a70c7613dd6d4557bbf23bb9281e7c0a533433d66e991d4938f134512947ff23968421419cfe725ac26547e492b3beb02811ac51111a91619ed251ac755531ce663c2dd17f736353301ce8321ab02050b7349063ea1c8aa0831cb60d201e7114aa561cd2804c3b90763117ba0756e45ecb8868bed20874281e769a06630b127a238558e52ebc3030d63f06f3060dd468aa2c89476e85935204f89196e4895717ec096dc9874cc24e353e8464150776dee69b224ab22eb13945748b2a94536e4f3ce42f57a9fe0b292b5b5bbc8c31626526d78877758572540c2d59cb278bbf4199f1ec6dd292ceefe49bf61ce4856f6bc441aed4e45858af9229e52cd0c6601b8912d6bb68c6d2208c8ad9e38c602f07efe4b3baaa2515818b8173847221fb93048a4214d1258478eb385c59df4545b4d321c1ea716e66aed137ae20f8eb97aaf9c15545cd84fa9021e61c72694fff06d98f6810319a90482cb985265b4443e3ee3fe9959b44de8e0b14f5db051661aec08135bfedfa236bd535a6f0d118eedccb749860bb59129d9327ebbf42838c38d0b297d7e68ba15cba2c20d13cbff7b1469b1b8c52431a26ae2eacc445118f115be3f90ee1f6b36ab76146b6a1ff53cfcc96bb06dc066e33ae8c7341f7d95f0cd5f6103f99e94cd50397f51ac571f80c508e0c7396ac28ff9c514a8148f3823203ef15c10ca20f418828977cabe2bba25ecd74e6548bcb95e2eabad414c40478e661e59d40ed5c2cafafc8732f06bde950cf14d692d8346e5845fff2a781a5932b3cc1c1161d873317d4a027d6d1d5625bce3f027a2249c51b96de7d1f12da1fadc0009a53af3e82a0af02db86e957a7134fa3457e76f24c3a6772ad45d84e96182216582eb88d17803f651e230539f833e2c3d2be6055e6d01c1938a490c916ed77c5a97b4cbab16fe4d461157451f375fd84174a4aded278a35f3b815d0fafe6d7ff05a8dde39e43643ccde3b726396777b5795a1d862a9bcf1b4e0c855d1f5734558e0f502e8daa4893d74c0a5383912ddb3ffcc91923150a8afc279adaa338d9d67bf92aff2cf82ee72f0ba00a6f3b70b89d0dcff045800c8cac8321c0a23d8017271506c4100a6e144e288214405d16b88f9b4c1687880b6b55a5916ce3c0d846895c042c419bb211277d67c23f8517aa9354e40c6bce0df085ac463d99a409a3245bd2d2dcee00c3ae43802e6432847c686125d0ca0d79938e3cb5f0468cc60a4e6b93f77ecdaeece5cf406b53215a37e77db3317950dd99456468ba0d19f4cd3441240e271d7f3d11243b3bc2d843bd932e75dddc978c573eb0157b2b83dd0eb5b1db920b8cfdcabb7fc541feeed06d9a49876cefb2384042e34565e6bb9d36a2747e885b5f42bfed66fb622893f09510e821eec1b59508d55ad84324352805c1ca9e26d44f35dbc6bb1f4c213f536628be1351ad5ba5f22d409bb16552357f9a93c139a8a7c6c32eabd7f18c39f986f42d833a729d7daf0c28888fe9376d565278e8221a1e7e2531c69e9dbc72cd4cdd368404c992e633591b0099c62e9bd9b6356426949366899c6768e89b6719f0f7af2668b5c6a9d4d77348f814c51722bc56bd527f79d6edc294f99f4116a09c9d26a0014fc4cda0936674d4968fe21c4d0405e6484df0046f1639cb15db59f747578aea2abdfbfc5d24fe5be983d9de10436cf87d8c9967de2807bc8e7b26228c2ba427cd73ffab0f93cd5b592005289b53d79f"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 13:05:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xd, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x208, 0x140, 0x208, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) 13:05:12 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 13:05:12 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x14, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 13:05:12 executing program 0: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0) [ 1644.170332][ T1274] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1644.450257][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1644.772231][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1644.781597][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.789593][ T1274] usb 4-1: Product: syz [ 1644.794378][ T1274] usb 4-1: Manufacturer: syz [ 1644.798987][ T1274] usb 4-1: SerialNumber: syz [ 1644.811673][ T1274] usb 4-1: config 0 descriptor?? [ 1645.070332][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1647.090268][ T1274] usb write operation failed. (-71) [ 1647.103905][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1647.123227][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1647.141881][ T1274] usb 4-1: media controller created [ 1647.170325][ T1274] usb read operation failed. (-71) [ 1647.190254][ T1274] usb write operation failed. (-71) [ 1647.197521][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1647.217565][ T1274] usb 4-1: USB disconnect, device number 124 13:05:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000430b00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:15 executing program 1: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)) 13:05:15 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 13:05:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:05:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 13:05:15 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x9, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 13:05:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7fff, @remote, 0x1f}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x10}}], 0x10}}, {{&(0x7f0000000140)=@l2, 0x80, 0x0}}], 0x2, 0x20004800) 13:05:15 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000700)="630144d272964f2b6410ddf1ad5babee87d8d2d7a1618856b117bf2455af1345f90e307940a7ab53a80aa839b6d08c40134df5bcbfe307b2bc8bf374b1f5ab8e9e449d287279d423753666962cc416ad4f129392ec03e4043c4e178959257439090bd07521ce014b6903321507d72531ef2889af73946dfdc4b42e456b1b73878d0fc5c7ce887753cd4a313020afc42870202432c3e2a803cd33322b5c1e6a0965490f6a4b3d2e015a9614eb3ba8668b2e6d3c4ba99be572a8407c705d0b7cfefa1cf7cdbfa6780aad370c3d8aaad5592c4b189291eb4a6ae41f0c", 0xdb, 0xfffeffff}, {&(0x7f00000005c0)="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", 0x25, 0xf893}, {&(0x7f00000001c0)="c15d28e834899572cc52bf34eb6515fabc1b37e8120ae64c7c02fa7b740544c589e3f49c500c874dcfb7e428fdd8a44d08634d55a5d3e72fd2c1b4b6667251ee6448b0ae285b4a37989c4a7114c8389990888c0f5e1a49c9faba749d8713f616b58317749068182918f0b143a522005f6f6e3937092b682916c3ad6fb3e3f65e5197a358b2a1b43a6bbe7ba79525429fe69a4acbedf3edc9819bcc13eae0d15f34a89f6cfbb2a69d2ec742dc3f6fdbbe5c1a4e2332f06e8c55258e6aa93359a0cd634f36de5aa515645e17e50184bc7208", 0xd1, 0x4}, {&(0x7f00000002c0)="252d778900000000c558db3b901b9b1f38a6ca1712364e6f5cc9a78dda896c6a6452b1cc5c66a61583690b3bd9bb4fabd089763ce54f67f4e88e42e001898800"/75, 0x4b, 0x1}, {&(0x7f0000000340)="2f0b359d33e19f9f39edb8", 0xb, 0x20}, {&(0x7f0000000380)="93ee3ca8214a5db57af2e5c757e692ca7396c1d6df00d98d6c272845f7f55f9ca00a7032e914650f3209ed4f6a9d3cd6112690f62ac3c83872c062cec03e84", 0x3f, 0x3}, {&(0x7f00000003c0)="e9c5b65c9dc7b859fd52279387c410777b27d81ad198829155e537d631d29d2fcf2a410453dbc0404df3eca2d45677a1b864b5d9b3369f680e2e97646dd0aebb21", 0xffffffffffffffaf, 0x1}, {&(0x7f0000000440)="f2", 0x1, 0x670}], 0x2003001, &(0x7f0000000540)=ANY=[@ANYBLOB="6d61616e6d7574653d2c962c7b5e272c00"/27]) 13:05:15 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 13:05:16 executing program 4: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 13:05:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0x0, 0x1600bd7d, 0x0, 0x0) [ 1647.788560][ T1221] tmpfs: Bad value for 'uid' [ 1647.810128][ T1274] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1648.003739][ T1212] loop0: detected capacity change from 0 to 264192 [ 1648.070513][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1648.380774][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1648.395203][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.405358][ T1274] usb 4-1: Product: syz [ 1648.409573][ T1274] usb 4-1: Manufacturer: syz [ 1648.416360][ T1274] usb 4-1: SerialNumber: syz [ 1648.425278][ T1274] usb 4-1: config 0 descriptor?? [ 1648.690182][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1650.741234][ T1274] usb write operation failed. (-71) [ 1650.748777][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1650.773287][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1650.789514][ T1274] usb 4-1: media controller created [ 1650.810266][ T1274] usb read operation failed. (-71) [ 1650.830107][ T1274] usb write operation failed. (-71) [ 1650.838656][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1650.860564][ T1274] usb 4-1: USB disconnect, device number 125 13:05:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000c00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:19 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 13:05:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='.\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='nodots,debug,allow_utime=0']) 13:05:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x4020940d, &(0x7f00000001c0)={'sit0\x00', 0x0}) 13:05:19 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000100), 0x0) 13:05:19 executing program 4: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 13:05:19 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 13:05:19 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x74) 13:05:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 13:05:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000f00003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:19 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) [ 1651.410018][ T1274] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1651.689981][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1651.990819][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1652.000440][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.008554][ T1274] usb 4-1: Product: syz [ 1652.014487][ T1274] usb 4-1: Manufacturer: syz [ 1652.019313][ T1274] usb 4-1: SerialNumber: syz [ 1652.026797][ T1274] usb 4-1: config 0 descriptor?? [ 1652.290104][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1654.299935][ T1274] usb write operation failed. (-71) [ 1654.311232][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1654.321849][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1654.336926][ T1274] usb 4-1: media controller created [ 1654.369908][ T1274] usb read operation failed. (-71) [ 1654.389861][ T1274] usb write operation failed. (-71) [ 1654.396772][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1654.408292][ T1274] usb 4-1: USB disconnect, device number 126 13:05:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:22 executing program 4: bpf$BPF_TASK_FD_QUERY(0x23, 0x0, 0x0) 13:05:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve1\x00', 'sit0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "84aff6cc1202197df84a33d7e64c8a961105d7ca9ba3595d44743afd0fd0"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 13:05:22 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) 13:05:22 executing program 1: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 13:05:22 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000002000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') [ 1654.620256][ T1326] x_tables: duplicate underflow at hook 2 13:05:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80) 13:05:23 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='comm\x00') 13:05:23 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) 13:05:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0xc01, 0x3, 0x310, 0x150, 0x5002004a, 0x7d08, 0x150, 0x3, 0x278, 0x3c8, 0x3c8, 0x278, 0x3c8, 0x4003, 0x0, {[{{@uncond, 0x90a, 0x130, 0x150, 0xde09, {0x4d, 0x48}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [], @ipv4=@private, [], @ipv4=@broadcast, [], @ipv4=@multicast2}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 13:05:23 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000004000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1654.929939][T27197] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1654.979911][ T1356] xt_nfacct: accounting object `syz1' does not exists [ 1655.179927][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1655.459866][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1655.468922][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.477444][T27197] usb 4-1: Product: syz [ 1655.481770][T27197] usb 4-1: Manufacturer: syz [ 1655.486627][T27197] usb 4-1: SerialNumber: syz [ 1655.496789][T27197] usb 4-1: config 0 descriptor?? [ 1655.750794][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1657.759733][T27197] usb write operation failed. (-71) [ 1657.771834][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1657.783030][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1657.796377][T27197] usb 4-1: media controller created [ 1657.835481][T27197] usb read operation failed. (-71) [ 1657.864692][T27197] usb write operation failed. (-71) [ 1657.872210][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1657.883344][T27197] usb 4-1: USB disconnect, device number 127 13:05:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/256, 0xfffffd92) 13:05:26 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) 13:05:26 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') 13:05:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 13:05:26 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000004100003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:26 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x4c}, 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) 13:05:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg$sock(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="e80ac49dc3e4405b83d2dc0e3982", 0xe}], 0x1, &(0x7f0000000140)=[@mark={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 13:05:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 13:05:26 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:26 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0x1}, {0xfffffffd}]}, 0x14, 0x3) [ 1658.429622][T27197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1658.719588][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1659.019885][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1659.028943][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.039603][T27197] usb 4-1: Product: syz [ 1659.043824][T27197] usb 4-1: Manufacturer: syz [ 1659.048442][T27197] usb 4-1: SerialNumber: syz [ 1659.063992][T27197] usb 4-1: config 0 descriptor?? [ 1659.329717][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1661.359732][T27197] usb write operation failed. (-71) [ 1661.366537][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1661.383211][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1661.400375][T27197] usb 4-1: media controller created [ 1661.422804][T27197] usb read operation failed. (-71) [ 1661.449611][T27197] usb write operation failed. (-71) [ 1661.458476][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1661.476801][T27197] usb 4-1: USB disconnect, device number 2 13:05:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:05:30 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 13:05:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 13:05:30 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:30 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="0100000000000b4300003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:30 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sigaltstack(&(0x7f000039f000/0x2000)=nil, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r1, 0x0, 0x1) 13:05:30 executing program 0: sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001100)) 13:05:30 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x101) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 13:05:30 executing program 1: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='c', 0x1, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 13:05:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000380)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) 13:05:30 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:30 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000006000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1662.111127][T27197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1662.369503][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1662.669573][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1662.678713][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.686873][T27197] usb 4-1: Product: syz [ 1662.691208][T27197] usb 4-1: Manufacturer: syz [ 1662.695975][T27197] usb 4-1: SerialNumber: syz [ 1662.703229][T27197] usb 4-1: config 0 descriptor?? [ 1662.959551][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1664.969471][T27197] usb write operation failed. (-71) [ 1664.976238][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1664.988231][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1664.997880][T27197] usb 4-1: media controller created [ 1665.021639][T27197] usb read operation failed. (-71) [ 1665.039475][T27197] usb write operation failed. (-71) [ 1665.046378][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1665.061420][T27197] usb 4-1: USB disconnect, device number 3 13:05:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) 13:05:33 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00') 13:05:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r0) 13:05:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:05:33 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000003003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:33 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v2, 0x14, 0x0) 13:05:33 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x8000, 0x200200) 13:05:33 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}, 0x20}], 0x1}, 0x0) 13:05:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000004003003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:33 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') [ 1665.589548][T27691] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1665.839399][T27691] usb 4-1: Using ep0 maxpacket: 8 13:05:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/181, 0xffffff29) 13:05:34 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}, 0x20}], 0x1}, 0x0) 13:05:34 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1666.123254][T27691] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1666.145252][T27691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.167031][T27691] usb 4-1: Product: syz [ 1666.177459][T27691] usb 4-1: Manufacturer: syz [ 1666.184107][T27691] usb 4-1: SerialNumber: syz [ 1666.201665][T27691] usb 4-1: config 0 descriptor?? [ 1666.469456][T27691] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1668.479356][T27691] usb write operation failed. (-71) [ 1668.490360][T27691] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1668.508007][T27691] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1668.530977][T27691] usb 4-1: media controller created [ 1668.550729][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.557040][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.570342][T27691] usb read operation failed. (-71) [ 1668.599335][T27691] usb write operation failed. (-71) [ 1668.606267][T27691] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1668.618182][T27691] usb 4-1: USB disconnect, device number 4 13:05:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:05:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 13:05:37 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000340003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000500)) 13:05:37 executing program 0: clock_gettime(0x0, &(0x7f0000006040)) 13:05:37 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}, 0x20}], 0x1}, 0x0) 13:05:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') 13:05:37 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/256, 0xfffffd92) read$char_usb(r0, 0x0, 0x0) 13:05:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') 13:05:37 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:37 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) recvmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/13, 0xd}, {0x0}, {0x0}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/124, 0x7c}], 0x5, 0x0, 0x110}, 0x22) timer_create(0x5, 0x0, &(0x7f0000001700)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 1669.159376][T27197] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1669.361886][ T25] audit: type=1326 audit(1631624737.768:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1617 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665f9 code=0x0 [ 1669.429308][T27197] usb 4-1: Using ep0 maxpacket: 8 [ 1669.759630][T27197] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1669.768894][T27197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.777824][T27197] usb 4-1: Product: syz [ 1669.782473][T27197] usb 4-1: Manufacturer: syz [ 1669.787153][T27197] usb 4-1: SerialNumber: syz [ 1669.796601][T27197] usb 4-1: config 0 descriptor?? [ 1670.009492][ T25] audit: type=1326 audit(1631624738.408:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1617 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665f9 code=0x0 [ 1670.059349][T27197] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1672.109103][T27197] usb write operation failed. (-71) [ 1672.116322][T27197] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1672.133491][T27197] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1672.143391][T27197] usb 4-1: media controller created [ 1672.169335][T27197] usb read operation failed. (-71) [ 1672.199169][T27197] usb write operation failed. (-71) [ 1672.206545][T27197] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1672.216615][T27197] usb 4-1: USB disconnect, device number 5 13:05:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4009c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13:05:40 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x102801) 13:05:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000013b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:40 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) 13:05:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 13:05:40 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) recvmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/13, 0xd}, {0x0}, {0x0}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/124, 0x7c}], 0x5, 0x0, 0x110}, 0x22) timer_create(0x5, 0x0, &(0x7f0000001700)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13:05:40 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3708e26ec810d2ac) 13:05:40 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') 13:05:40 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:05:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') 13:05:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000023b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:41 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x4c}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 1672.685251][ T25] audit: type=1326 audit(1631624741.088:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665f9 code=0x0 [ 1672.709189][ T1274] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1672.999141][ T1274] usb 4-1: Using ep0 maxpacket: 8 [ 1673.297885][ T1274] usb 4-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d [ 1673.307103][ T1274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.318108][ T1274] usb 4-1: Product: syz [ 1673.323523][ T1274] usb 4-1: Manufacturer: syz [ 1673.328151][ T1274] usb 4-1: SerialNumber: syz [ 1673.339105][ T1274] usb 4-1: config 0 descriptor?? [ 1673.589473][ T1274] usb 4-1: dvb_usb_v2: found a 'Technisat CableStar Combo HD CI' in warm state [ 1675.628998][ T1274] usb write operation failed. (-71) [ 1675.635782][ T1274] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1675.652451][ T1274] dvbdev: DVB: registering new adapter (Technisat CableStar Combo HD CI) [ 1675.662168][ T1274] usb 4-1: media controller created [ 1675.679273][ T1274] usb read operation failed. (-71) [ 1675.709246][ T1274] usb write operation failed. (-71) [ 1675.716981][ T1274] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1675.733418][ T1274] usb 4-1: USB disconnect, device number 6 13:05:44 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x101740, 0x0) 13:05:44 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:05:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:05:44 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000033b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:44 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) recvmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/13, 0xd}, {0x0}, {0x0}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/124, 0x7c}], 0x5, 0x0, 0x110}, 0x22) timer_create(0x5, 0x0, &(0x7f0000001700)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13:05:44 executing program 3: ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000100)) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) 13:05:44 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:05:44 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 13:05:44 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') 13:05:44 executing program 3: clock_gettime(0x0, &(0x7f0000006040)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006080)={0x0, r0+60000000}) 13:05:44 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000043b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:44 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x20}], 0x1}, 0x0) [ 1676.205497][ T25] audit: type=1326 audit(1631624744.608:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1722 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665f9 code=0x0 13:05:44 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$eventfd(r0, 0x0, 0x0) 13:05:44 executing program 3: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) 13:05:44 executing program 0: socketpair(0x27, 0x0, 0x0, 0x0) 13:05:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82002, 0x0) 13:05:45 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) recvmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/13, 0xd}, {0x0}, {0x0}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/124, 0x7c}], 0x5, 0x0, 0x110}, 0x22) timer_create(0x5, 0x0, &(0x7f0000001700)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13:05:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240047f8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 13:05:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/256, 0xfffffd92) 13:05:45 executing program 3: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/bus/container', 0x0, 0x0) 13:05:45 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) 13:05:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x803, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) [ 1677.142430][ T25] audit: type=1326 audit(1631624745.548:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1773 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665f9 code=0x0 13:05:46 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000053b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300d0c8de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 13:05:46 executing program 5: socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x20}], 0x1}, 0x0) 13:05:46 executing program 0: pipe2(&(0x7f0000000380), 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 13:05:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 13:05:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1694.040853][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.048186][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.346052][ T1792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.999021][ T1792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.987600][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.993926][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.812726][ T1792] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.822737][ T1792] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.834641][ T1792] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.843719][ T1792] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.424986][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.431316][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 1833.662698][ T26] INFO: task syz-executor.1:1767 blocked for more than 143 seconds. [ 1833.670723][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1833.691889][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1833.703537][ T26] task:syz-executor.1 state:D stack:26800 pid: 1767 ppid: 6542 flags:0x00004004 [ 1833.723822][ T26] Call Trace: [ 1833.728381][ T26] __schedule+0xc8d/0x1270 [ 1833.742591][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1833.748521][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1833.766201][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1833.771450][ T26] schedule+0x14b/0x210 [ 1833.781984][ T26] schedule_preempt_disabled+0xf/0x20 [ 1833.793253][ T26] __mutex_lock_common+0xdff/0x2550 [ 1833.798507][ T26] ? tun_chr_close+0x3c/0x130 [ 1833.812494][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1833.817833][ T26] ? _raw_spin_unlock+0x24/0x40 [ 1833.837920][ T26] ? fasync_remove_entry+0x1a0/0x1d0 [ 1833.849214][ T26] ? tun_chr_open+0x470/0x470 [ 1833.861301][ T26] mutex_lock_nested+0x1a/0x20 [ 1833.870286][ T26] tun_chr_close+0x3c/0x130 [ 1833.881820][ T26] __fput+0x3fe/0x870 [ 1833.890105][ T26] task_work_run+0x146/0x1c0 [ 1833.901897][ T26] exit_to_user_mode_prepare+0x209/0x220 [ 1833.916337][ T26] ? trace_irq_disable_rcuidle+0x11/0x170 [ 1833.922221][ T26] syscall_exit_to_user_mode+0x2e/0x70 [ 1833.938634][ T26] do_syscall_64+0x53/0xd0 [ 1833.948843][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1833.959221][ T26] RIP: 0033:0x41940b [ 1833.969240][ T26] RSP: 002b:00007ffd03c723c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1833.980801][ T26] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041940b [ 1833.996036][ T26] RDX: 00000000005700a8 RSI: 0000000000000080 RDI: 0000000000000003 [ 1834.008833][ T26] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000005700b0 [ 1834.021376][ T26] R10: 00007ffd03c724b0 R11: 0000000000000293 R12: 0000000000199ba4 [ 1834.035153][ T26] R13: 00000000000003e8 R14: 000000000056bf80 R15: 000000000019953c [ 1834.050062][ T26] INFO: task syz-executor.3:1797 blocked for more than 143 seconds. [ 1834.061220][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1834.075071][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1834.089881][ T26] task:syz-executor.3 state:D stack:26704 pid: 1797 ppid: 6546 flags:0x00004004 [ 1834.102294][ T26] Call Trace: [ 1834.105608][ T26] __schedule+0xc8d/0x1270 [ 1834.110057][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1834.125106][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1834.130619][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1834.147368][ T26] schedule+0x14b/0x210 [ 1834.151581][ T26] schedule_preempt_disabled+0xf/0x20 [ 1834.163144][ T26] __mutex_lock_common+0xdff/0x2550 [ 1834.168420][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1834.175194][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1834.180421][ T26] ? rcu_lock_release+0x5/0x20 [ 1834.185459][ T26] mutex_lock_nested+0x1a/0x20 [ 1834.190239][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1834.195287][ T26] ? rtnetlink_bind+0x80/0x80 [ 1834.199977][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1834.206402][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1834.211634][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1834.218516][ T26] ? local_bh_enable+0x5/0x20 [ 1834.223977][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1834.228866][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1834.235388][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1834.241798][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1834.249728][ T26] ? dev_queue_xmit+0x20/0x20 [ 1834.255207][ T26] netlink_rcv_skb+0x200/0x470 [ 1834.259997][ T26] ? rtnetlink_bind+0x80/0x80 [ 1834.266436][ T26] ? netlink_ack+0xb70/0xb70 [ 1834.271079][ T26] netlink_unicast+0x814/0x9f0 [ 1834.278095][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1834.285592][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1834.290734][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1834.297341][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1834.303838][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1834.308982][ T26] netlink_sendmsg+0xa29/0xe50 [ 1834.315947][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1834.321172][ T26] ? iovec_from_user+0x359/0x390 [ 1834.327845][ T26] ? __import_iovec+0x36f/0x520 [ 1834.342211][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1834.348481][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1834.355087][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1834.360311][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1834.366752][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1834.371823][ T26] __sys_sendmsg+0x37d/0x470 [ 1834.377923][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1834.384695][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1834.390400][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1834.399465][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1834.406607][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1834.411850][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1834.419508][ T26] do_syscall_64+0x44/0xd0 [ 1834.425165][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1834.431109][ T26] RIP: 0033:0x4665f9 [ 1834.436640][ T26] RSP: 002b:00007f226c4d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1834.446564][ T26] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 1834.455542][ T26] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 1834.464571][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1834.474603][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 1834.483793][ T26] R13: 00007ffe4f24bfef R14: 00007f226c4d2300 R15: 0000000000022000 [ 1834.491898][ T26] INFO: task syz-executor.3:1798 blocked for more than 144 seconds. [ 1834.502417][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1834.508409][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1834.521478][ T26] task:syz-executor.3 state:D stack:26704 pid: 1798 ppid: 6546 flags:0x00004004 [ 1834.531884][ T26] Call Trace: [ 1834.536218][ T26] __schedule+0xc8d/0x1270 [ 1834.540759][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1834.549205][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1834.555954][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1834.561186][ T26] schedule+0x14b/0x210 [ 1834.567136][ T26] schedule_preempt_disabled+0xf/0x20 [ 1834.573593][ T26] __mutex_lock_common+0xdff/0x2550 [ 1834.578841][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1834.585783][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1834.591015][ T26] ? rcu_lock_release+0x5/0x20 [ 1834.597454][ T26] mutex_lock_nested+0x1a/0x20 [ 1834.605131][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1834.610193][ T26] ? rtnetlink_bind+0x80/0x80 [ 1834.616863][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1834.625102][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1834.630356][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1834.637487][ T26] ? local_bh_enable+0x5/0x20 [ 1834.642196][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1834.649170][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1834.655649][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1834.661308][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1834.669005][ T26] ? dev_queue_xmit+0x20/0x20 [ 1834.674924][ T26] netlink_rcv_skb+0x200/0x470 [ 1834.679713][ T26] ? rtnetlink_bind+0x80/0x80 [ 1834.686355][ T26] ? netlink_ack+0xb70/0xb70 [ 1834.690999][ T26] netlink_unicast+0x814/0x9f0 [ 1834.697456][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1834.703559][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1834.708693][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1834.716122][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1834.721440][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1834.728792][ T26] netlink_sendmsg+0xa29/0xe50 [ 1834.736470][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1834.741792][ T26] ? iovec_from_user+0x359/0x390 [ 1834.748530][ T26] ? __import_iovec+0x36f/0x520 [ 1834.754894][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1834.760202][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1834.767439][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1834.773770][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1834.778569][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1834.785382][ T26] __sys_sendmsg+0x37d/0x470 [ 1834.789997][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1834.796717][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1834.803600][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1834.809614][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1834.817286][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1834.824332][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1834.830342][ T26] do_syscall_64+0x44/0xd0 [ 1834.836440][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1834.845107][ T26] RIP: 0033:0x4665f9 [ 1834.849018][ T26] RSP: 002b:00007f226c4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1834.860079][ T26] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665f9 [ 1834.870386][ T26] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1834.879479][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1834.888651][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0 [ 1834.897858][ T26] R13: 00007ffe4f24bfef R14: 00007f226c4b1300 R15: 0000000000022000 [ 1834.907203][ T26] INFO: task syz-executor.3:1801 blocked for more than 144 seconds. [ 1834.916468][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1834.924650][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1834.935173][ T26] task:syz-executor.3 state:D stack:26704 pid: 1801 ppid: 6546 flags:0x00004004 [ 1834.945604][ T26] Call Trace: [ 1834.948901][ T26] __schedule+0xc8d/0x1270 [ 1834.957038][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1834.964618][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1834.970114][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1834.977034][ T26] schedule+0x14b/0x210 [ 1834.981213][ T26] schedule_preempt_disabled+0xf/0x20 [ 1834.988341][ T26] __mutex_lock_common+0xdff/0x2550 [ 1834.994676][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1835.000593][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1835.007858][ T26] ? rcu_lock_release+0x5/0x20 [ 1835.013970][ T26] mutex_lock_nested+0x1a/0x20 [ 1835.018757][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1835.025443][ T26] ? rtnetlink_bind+0x80/0x80 [ 1835.030145][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1835.037231][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1835.044759][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1835.050156][ T26] ? local_bh_enable+0x5/0x20 [ 1835.057214][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1835.065060][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1835.070300][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1835.077699][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1835.084804][ T26] ? dev_queue_xmit+0x20/0x20 [ 1835.089520][ T26] netlink_rcv_skb+0x200/0x470 [ 1835.096912][ T26] ? rtnetlink_bind+0x80/0x80 [ 1835.102054][ T26] ? netlink_ack+0xb70/0xb70 [ 1835.108352][ T26] netlink_unicast+0x814/0x9f0 [ 1835.114243][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1835.119200][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1835.125987][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1835.131037][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1835.138139][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1835.144368][ T26] netlink_sendmsg+0xa29/0xe50 [ 1835.149198][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1835.156952][ T26] ? iovec_from_user+0x359/0x390 [ 1835.163410][ T26] ? __import_iovec+0x36f/0x520 [ 1835.168293][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1835.176928][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1835.183601][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1835.188911][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1835.195501][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1835.200575][ T26] __sys_sendmsg+0x37d/0x470 [ 1835.206814][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1835.211801][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1835.219187][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1835.227077][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1835.234253][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1835.239482][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1835.247383][ T26] do_syscall_64+0x44/0xd0 [ 1835.251842][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1835.259539][ T26] RIP: 0033:0x4665f9 [ 1835.265873][ T26] RSP: 002b:00007f226c490188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1835.275510][ T26] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665f9 [ 1835.286097][ T26] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 1835.295346][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1835.304670][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c1a8 [ 1835.313925][ T26] R13: 00007ffe4f24bfef R14: 00007f226c490300 R15: 0000000000022000 [ 1835.322059][ T26] INFO: task syz-executor.2:1813 blocked for more than 145 seconds. [ 1835.331836][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1835.339439][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1835.349208][ T26] task:syz-executor.2 state:D stack:26064 pid: 1813 ppid: 6544 flags:0x00004004 [ 1835.359233][ T26] Call Trace: [ 1835.364074][ T26] __schedule+0xc8d/0x1270 [ 1835.368539][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1835.376233][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1835.381743][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1835.388248][ T26] schedule+0x14b/0x210 [ 1835.394917][ T26] schedule_preempt_disabled+0xf/0x20 [ 1835.400424][ T26] __mutex_lock_common+0xdff/0x2550 [ 1835.406345][ T26] ? nl80211_pre_doit+0x28/0x5b0 [ 1835.411323][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1835.417696][ T26] ? __nla_parse+0x3c/0x50 [ 1835.422148][ T26] mutex_lock_nested+0x1a/0x20 [ 1835.427712][ T26] nl80211_pre_doit+0x28/0x5b0 [ 1835.432917][ T26] genl_rcv_msg+0xfd8/0x1480 [ 1835.437534][ T26] ? genl_bind+0x360/0x360 [ 1835.441936][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1835.448954][ T26] ? local_bh_enable+0x5/0x20 [ 1835.454920][ T26] ? __lock_acquire+0x1382/0x2b00 [ 1835.459992][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1835.467448][ T26] ? nl80211_register_mgmt+0x3c0/0x3c0 [ 1835.473207][ T26] netlink_rcv_skb+0x200/0x470 [ 1835.478082][ T26] ? genl_bind+0x360/0x360 [ 1835.483365][ T26] ? netlink_ack+0xb70/0xb70 [ 1835.490118][ T26] ? __down_read_common+0x1b0/0x450 [ 1835.495558][ T26] ? up_read_non_owner+0x1c0/0x1c0 [ 1835.500688][ T26] ? netlink_deliver_tap+0x130/0x880 [ 1835.506115][ T26] genl_rcv+0x24/0x40 [ 1835.510139][ T26] netlink_unicast+0x814/0x9f0 [ 1835.515057][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1835.520176][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1835.525532][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1835.530656][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1835.537625][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1835.542882][ T26] netlink_sendmsg+0xa29/0xe50 [ 1835.547689][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1835.553128][ T26] ? iovec_from_user+0x359/0x390 [ 1835.558080][ T26] ? __import_iovec+0x36f/0x520 [ 1835.563050][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1835.568795][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1835.574624][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1835.579941][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1835.585058][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1835.590199][ T26] __sys_sendmsg+0x37d/0x470 [ 1835.594946][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1835.599898][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1835.605742][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1835.611754][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1835.617986][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1835.623307][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1835.629321][ T26] do_syscall_64+0x44/0xd0 [ 1835.633921][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1835.639826][ T26] RIP: 0033:0x4665f9 [ 1835.645538][ T26] RSP: 002b:00007f370e11f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1835.654549][ T26] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 1835.663116][ T26] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000005 [ 1835.671555][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1835.680250][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 1835.688349][ T26] R13: 00007ffec4ffde3f R14: 00007f370e11f300 R15: 0000000000022000 [ 1835.696453][ T26] INFO: task syz-executor.2:1825 blocked for more than 145 seconds. [ 1835.705251][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1835.711160][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1835.719963][ T26] task:syz-executor.2 state:D stack:26768 pid: 1825 ppid: 6544 flags:0x00004004 [ 1835.730039][ T26] Call Trace: [ 1835.734127][ T26] __schedule+0xc8d/0x1270 [ 1835.738588][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1835.745757][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1835.751261][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1835.759047][ T26] schedule+0x14b/0x210 [ 1835.763977][ T26] schedule_preempt_disabled+0xf/0x20 [ 1835.769376][ T26] __mutex_lock_common+0xdff/0x2550 [ 1835.776304][ T26] ? nl80211_pre_doit+0x28/0x5b0 [ 1835.781274][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1835.787982][ T26] ? __nla_parse+0x3c/0x50 [ 1835.793237][ T26] mutex_lock_nested+0x1a/0x20 [ 1835.798086][ T26] nl80211_pre_doit+0x28/0x5b0 [ 1835.804252][ T26] genl_rcv_msg+0xfd8/0x1480 [ 1835.808881][ T26] ? genl_bind+0x360/0x360 [ 1835.815360][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1835.820764][ T26] ? local_bh_enable+0x5/0x20 [ 1835.826773][ T26] ? __lock_acquire+0x1382/0x2b00 [ 1835.831854][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1835.839609][ T26] ? nl80211_register_mgmt+0x3c0/0x3c0 [ 1835.846609][ T26] netlink_rcv_skb+0x200/0x470 [ 1835.851401][ T26] ? genl_bind+0x360/0x360 [ 1835.857184][ T26] ? netlink_ack+0xb70/0xb70 [ 1835.861794][ T26] ? __down_read_common+0x1b0/0x450 [ 1835.868699][ T26] ? up_read_non_owner+0x1c0/0x1c0 [ 1835.874598][ T26] ? netlink_deliver_tap+0x130/0x880 [ 1835.880635][ T26] genl_rcv+0x24/0x40 [ 1835.895191][ T26] netlink_unicast+0x814/0x9f0 [ 1835.900009][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1835.919641][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1835.929341][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1835.941110][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1835.950929][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1835.963502][ T26] netlink_sendmsg+0xa29/0xe50 [ 1835.968415][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1835.979161][ T26] ? iovec_from_user+0x359/0x390 [ 1835.984982][ T26] ? __import_iovec+0x36f/0x520 [ 1835.989868][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1835.996497][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1836.001980][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1836.008575][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1836.014125][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1836.019195][ T26] __sys_sendmsg+0x37d/0x470 [ 1836.025143][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1836.030102][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1836.037844][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1836.044800][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1836.050812][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1836.058126][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1836.064927][ T26] do_syscall_64+0x44/0xd0 [ 1836.069367][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1836.077425][ T26] RIP: 0033:0x4665f9 [ 1836.081890][ T26] RSP: 002b:00007f370e0dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.091633][ T26] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665f9 [ 1836.100542][ T26] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000005 [ 1836.109358][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1836.118142][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c1a8 [ 1836.126945][ T26] R13: 00007ffec4ffde3f R14: 00007f370e0dd300 R15: 0000000000022000 [ 1836.135856][ T26] INFO: task syz-executor.5:1812 blocked for more than 145 seconds. [ 1836.145387][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1836.151285][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1836.163523][ T26] task:syz-executor.5 state:D stack:26704 pid: 1812 ppid: 6959 flags:0x00004004 [ 1836.174341][ T26] Call Trace: [ 1836.177640][ T26] __schedule+0xc8d/0x1270 [ 1836.182102][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1836.191066][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1836.197409][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1836.203432][ T26] schedule+0x14b/0x210 [ 1836.207614][ T26] schedule_preempt_disabled+0xf/0x20 [ 1836.214432][ T26] __mutex_lock_common+0xdff/0x2550 [ 1836.219658][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1836.226513][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1836.231736][ T26] ? rcu_lock_release+0x5/0x20 [ 1836.238081][ T26] mutex_lock_nested+0x1a/0x20 [ 1836.243615][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1836.248587][ T26] ? rtnetlink_bind+0x80/0x80 [ 1836.255414][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1836.260813][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1836.267349][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1836.273512][ T26] ? local_bh_enable+0x5/0x20 [ 1836.278200][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1836.285876][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1836.291116][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1836.312106][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1836.319274][ T26] ? dev_queue_xmit+0x20/0x20 [ 1836.333629][ T26] netlink_rcv_skb+0x200/0x470 [ 1836.338443][ T26] ? rtnetlink_bind+0x80/0x80 [ 1836.352031][ T26] ? netlink_ack+0xb70/0xb70 [ 1836.358940][ T26] netlink_unicast+0x814/0x9f0 [ 1836.372740][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1836.377717][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1836.384649][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1836.390052][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1836.397414][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1836.403336][ T26] netlink_sendmsg+0xa29/0xe50 [ 1836.408137][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1836.415393][ T26] ? iovec_from_user+0x359/0x390 [ 1836.420355][ T26] ? __import_iovec+0x36f/0x520 [ 1836.427691][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1836.433861][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1836.439336][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1836.446102][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1836.450903][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1836.464813][ T26] __sys_sendmsg+0x37d/0x470 [ 1836.469438][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1836.483358][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1836.489073][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1836.497817][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1836.505505][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1836.510732][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1836.518219][ T26] do_syscall_64+0x44/0xd0 [ 1836.524329][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1836.530418][ T26] RIP: 0033:0x4665f9 [ 1836.535782][ T26] RSP: 002b:00007fa0b8d18188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.545307][ T26] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1836.554146][ T26] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000010 [ 1836.562131][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1836.571654][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1836.580857][ T26] R13: 00007ffe45fec7bf R14: 00007fa0b8d18300 R15: 0000000000022000 [ 1836.590955][ T26] INFO: task syz-executor.0:1816 blocked for more than 146 seconds. [ 1836.600747][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1836.609637][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1836.620071][ T26] task:syz-executor.0 state:D stack:26704 pid: 1816 ppid: 6540 flags:0x00004004 [ 1836.630428][ T26] Call Trace: [ 1836.635406][ T26] __schedule+0xc8d/0x1270 [ 1836.639865][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1836.647322][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1836.653782][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1836.659003][ T26] schedule+0x14b/0x210 [ 1836.664957][ T26] schedule_preempt_disabled+0xf/0x20 [ 1836.670356][ T26] __mutex_lock_common+0xdff/0x2550 [ 1836.677111][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1836.683122][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1836.688337][ T26] ? rcu_lock_release+0x5/0x20 [ 1836.695216][ T26] mutex_lock_nested+0x1a/0x20 [ 1836.700006][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1836.706435][ T26] ? rtnetlink_bind+0x80/0x80 [ 1836.711135][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1836.719401][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1836.726245][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1836.731643][ T26] ? local_bh_enable+0x5/0x20 [ 1836.737894][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1836.744444][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1836.749693][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1836.756958][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1836.763829][ T26] ? dev_queue_xmit+0x20/0x20 [ 1836.768544][ T26] netlink_rcv_skb+0x200/0x470 [ 1836.774816][ T26] ? rtnetlink_bind+0x80/0x80 [ 1836.779515][ T26] ? netlink_ack+0xb70/0xb70 [ 1836.785643][ T26] netlink_unicast+0x814/0x9f0 [ 1836.790456][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1836.797719][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1836.803764][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1836.808810][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1836.815761][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1836.820900][ T26] netlink_sendmsg+0xa29/0xe50 [ 1836.827991][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1836.835448][ T26] ? iovec_from_user+0x359/0x390 [ 1836.840411][ T26] ? __import_iovec+0x36f/0x520 [ 1836.846908][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1836.853977][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1836.859457][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1836.866153][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1836.870952][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1836.877508][ T26] __sys_sendmsg+0x37d/0x470 [ 1836.882995][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1836.887956][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1836.895189][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1836.901570][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1836.909078][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1836.915253][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1836.921256][ T26] do_syscall_64+0x44/0xd0 [ 1836.927267][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1836.934887][ T26] RIP: 0033:0x4665f9 [ 1836.938800][ T26] RSP: 002b:00007f1c6c340188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.949912][ T26] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1836.959453][ T26] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1836.969108][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1836.978116][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1836.987035][ T26] R13: 00007ffda74e94bf R14: 00007f1c6c340300 R15: 0000000000022000 [ 1836.996122][ T26] INFO: task syz-executor.0:1819 blocked for more than 146 seconds. [ 1837.005571][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1837.011472][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1837.021691][ T26] task:syz-executor.0 state:D stack:26704 pid: 1819 ppid: 6540 flags:0x00004004 [ 1837.033075][ T26] Call Trace: [ 1837.036377][ T26] __schedule+0xc8d/0x1270 [ 1837.040818][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1837.057056][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1837.070314][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1837.080282][ T26] schedule+0x14b/0x210 [ 1837.092283][ T26] schedule_preempt_disabled+0xf/0x20 [ 1837.097692][ T26] __mutex_lock_common+0xdff/0x2550 [ 1837.113475][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1837.118628][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1837.132171][ T26] ? rcu_lock_release+0x5/0x20 [ 1837.136997][ T26] mutex_lock_nested+0x1a/0x20 [ 1837.141768][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1837.148968][ T26] ? rtnetlink_bind+0x80/0x80 [ 1837.154561][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1837.159958][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1837.167574][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1837.174652][ T26] ? local_bh_enable+0x5/0x20 [ 1837.179353][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1837.186535][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1837.191789][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1837.198865][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1837.205796][ T26] ? dev_queue_xmit+0x20/0x20 [ 1837.210871][ T26] netlink_rcv_skb+0x200/0x470 [ 1837.219193][ T26] ? rtnetlink_bind+0x80/0x80 [ 1837.232077][ T26] ? netlink_ack+0xb70/0xb70 [ 1837.237621][ T26] netlink_unicast+0x814/0x9f0 [ 1837.252177][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1837.257179][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1837.264009][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1837.269057][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1837.276672][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1837.281817][ T26] netlink_sendmsg+0xa29/0xe50 [ 1837.288999][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1837.295888][ T26] ? iovec_from_user+0x359/0x390 [ 1837.300844][ T26] ? __import_iovec+0x36f/0x520 [ 1837.307193][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1837.313716][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1837.319207][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1837.325946][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1837.330747][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1837.337355][ T26] __sys_sendmsg+0x37d/0x470 [ 1837.341974][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1837.348598][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1837.355238][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1837.361252][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1837.369270][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1837.375532][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1837.381536][ T26] do_syscall_64+0x44/0xd0 [ 1837.388222][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1837.395845][ T26] RIP: 0033:0x4665f9 [ 1837.399760][ T26] RSP: 002b:00007f1c6c31f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.410449][ T26] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 1837.419891][ T26] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 1837.441873][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1837.450874][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 1837.468579][ T26] R13: 00007ffda74e94bf R14: 00007f1c6c31f300 R15: 0000000000022000 [ 1837.479144][ T26] INFO: task syz-executor.0:1826 blocked for more than 147 seconds. [ 1837.495554][ T26] Not tainted 5.15.0-rc1-syzkaller #0 [ 1837.501465][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1837.516164][ T26] task:syz-executor.0 state:D stack:26704 pid: 1826 ppid: 6540 flags:0x00004004 [ 1837.527231][ T26] Call Trace: [ 1837.530535][ T26] __schedule+0xc8d/0x1270 [ 1837.536485][ T26] ? release_firmware_map_entry+0x181/0x181 [ 1837.543352][ T26] ? __mutex_trylock_common+0xb3/0x300 [ 1837.548840][ T26] ? do_raw_spin_unlock+0x134/0x8a0 [ 1837.555511][ T26] schedule+0x14b/0x210 [ 1837.559697][ T26] schedule_preempt_disabled+0xf/0x20 [ 1837.566585][ T26] __mutex_lock_common+0xdff/0x2550 [ 1837.571818][ T26] ? rtnetlink_rcv_msg+0x8ed/0xe60 [ 1837.577712][ T26] ? mutex_lock_io_nested+0x60/0x60 [ 1837.583631][ T26] ? rcu_lock_release+0x5/0x20 [ 1837.588437][ T26] mutex_lock_nested+0x1a/0x20 [ 1837.593390][ T26] rtnetlink_rcv_msg+0x8ed/0xe60 [ 1837.598346][ T26] ? rtnetlink_bind+0x80/0x80 [ 1837.603130][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1837.608508][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1837.613862][ T26] ? __local_bh_enable_ip+0x163/0x1f0 [ 1837.619638][ T26] ? local_bh_enable+0x5/0x20 [ 1837.624456][ T26] ? _local_bh_enable+0xa0/0xa0 [ 1837.629333][ T26] ? __dev_queue_xmit+0x1e81/0x3520 [ 1837.634719][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1837.640365][ T26] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1837.646664][ T26] ? dev_queue_xmit+0x20/0x20 [ 1837.651381][ T26] netlink_rcv_skb+0x200/0x470 [ 1837.656434][ T26] ? rtnetlink_bind+0x80/0x80 [ 1837.661208][ T26] ? netlink_ack+0xb70/0xb70 [ 1837.666143][ T26] netlink_unicast+0x814/0x9f0 [ 1837.670925][ T26] ? netlink_detachskb+0xa0/0xa0 [ 1837.676171][ T26] ? __virt_addr_valid+0x21b/0x2d0 [ 1837.681365][ T26] ? __phys_addr_symbol+0x2b/0x70 [ 1837.687405][ T26] ? __check_object_size+0x2f3/0x3f0 [ 1837.693614][ T26] ? bpf_lsm_netlink_send+0x5/0x10 [ 1837.698760][ T26] netlink_sendmsg+0xa29/0xe50 [ 1837.704001][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1837.709225][ T26] ? iovec_from_user+0x359/0x390 [ 1837.715040][ T26] ? __import_iovec+0x36f/0x520 [ 1837.720422][ T26] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1837.726270][ T26] ? security_socket_sendmsg+0x9d/0xb0 [ 1837.731744][ T26] ? netlink_getsockopt+0xa60/0xa60 [ 1837.737860][ T26] ____sys_sendmsg+0x5b9/0x910 [ 1837.743905][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 1837.748957][ T26] __sys_sendmsg+0x37d/0x470 [ 1837.753982][ T26] ? ____sys_sendmsg+0x910/0x910 [ 1837.758937][ T26] ? rcu_read_lock_sched_held+0x89/0x130 [ 1837.765484][ T26] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1837.771505][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1837.778967][ T26] ? lockdep_hardirqs_on+0x95/0x140 [ 1837.785457][ T26] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1837.791458][ T26] do_syscall_64+0x44/0xd0 [ 1837.796793][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1837.803052][ T26] RIP: 0033:0x4665f9 [ 1837.806961][ T26] RSP: 002b:00007f1c6c2fe188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.816447][ T26] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665f9 [ 1837.826140][ T26] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1837.834584][ T26] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 1837.844602][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0 [ 1837.852724][ T26] R13: 00007ffda74e94bf R14: 00007f1c6c2fe300 R15: 0000000000022000 [ 1837.860954][ T26] [ 1837.860954][ T26] Showing all locks held in the system: [ 1837.868829][ T26] 4 locks held by kworker/u4:1/10: [ 1837.874144][ T26] #0: ffff88801638b138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 [ 1837.886419][ T26] #1: ffffc90000cf7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 [ 1837.896514][ T26] #2: ffffffff8d94f7f0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf0/0xc50 [ 1837.906005][ T26] #3: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x170 [ 1837.915586][ T26] 3 locks held by kworker/1:0/20: [ 1837.920630][ T26] #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 [ 1837.940644][ T26] #1: ffffc90000da7d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 [ 1837.951536][ T26] #2: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1837.971585][ T26] 1 lock held by khungtaskd/26: [ 1837.977037][ T26] #0: ffffffff8c91c180 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1838.000284][ T26] 3 locks held by kworker/u4:3/160: [ 1838.005952][ T26] #0: ffff888143fcb938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 [ 1838.026167][ T26] #1: ffffc9000201fd20 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 [ 1838.041137][ T26] #2: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbc/0x660 [ 1838.052677][ T26] 1 lock held by in:imklog/6222: [ 1838.057626][ T26] #0: ffff8880798d8d70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 [ 1838.067415][ T26] 3 locks held by kworker/1:3/6742: [ 1838.073082][ T26] #0: ffff888025e0e538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 [ 1838.084561][ T26] #1: ffffc90002e6fd20 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 [ 1838.095453][ T26] #2: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 1838.105501][ T26] 3 locks held by kworker/1:5/902: [ 1838.110626][ T26] #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 [ 1838.121577][ T26] #1: ffffc90017d4fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 [ 1838.134571][ T26] #2: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1838.144250][ T26] 1 lock held by syz-executor.1/1767: [ 1838.149928][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3c/0x130 [ 1838.160838][ T26] 1 lock held by syz-executor.3/1792: [ 1838.175713][ T26] 1 lock held by syz-executor.3/1797: [ 1838.181115][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.199697][ T26] 1 lock held by syz-executor.3/1798: [ 1838.205402][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.222144][ T26] 1 lock held by syz-executor.3/1801: [ 1838.227533][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.238555][ T26] 2 locks held by syz-executor.2/1813: [ 1838.245656][ T26] #0: ffffffff8d9ba4d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1838.254143][ T26] #1: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x5b0 [ 1838.263712][ T26] 2 locks held by syz-executor.2/1825: [ 1838.269177][ T26] #0: ffffffff8d9ba4d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1838.277636][ T26] #1: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x5b0 [ 1838.287123][ T26] 1 lock held by syz-executor.5/1812: [ 1838.292984][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.302809][ T26] 1 lock held by syz-executor.0/1816: [ 1838.308189][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.317900][ T26] 1 lock held by syz-executor.0/1819: [ 1838.323633][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.334656][ T26] 1 lock held by syz-executor.0/1826: [ 1838.340037][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.349709][ T26] 1 lock held by syz-executor.0/1827: [ 1838.356946][ T26] #0: ffffffff8d95b448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x8ed/0xe60 [ 1838.368246][ T26] [ 1838.370580][ T26] ============================================= [ 1838.370580][ T26] [ 1838.380609][ T26] NMI backtrace for cpu 0 [ 1838.384953][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc1-syzkaller #0 [ 1838.393122][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.403188][ T26] Call Trace: [ 1838.406491][ T26] dump_stack_lvl+0x1dc/0x2d8 [ 1838.411355][ T26] ? show_regs_print_info+0x12/0x12 [ 1838.416555][ T26] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1838.422301][ T26] nmi_cpu_backtrace+0x45f/0x490 [ 1838.427251][ T26] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1838.433492][ T26] ? wake_up_klogd+0xb2/0xf0 [ 1838.438096][ T26] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1838.443840][ T26] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1838.450002][ T26] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 1838.456003][ T26] watchdog+0xc54/0xca0 [ 1838.460202][ T26] kthread+0x453/0x480 [ 1838.464351][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1838.469380][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1838.473982][ T26] ret_from_fork+0x1f/0x30 [ 1838.479348][ T26] Sending NMI from CPU 0 to CPUs 1: [ 1838.484747][ C1] NMI backtrace for cpu 1 [ 1838.484758][ C1] CPU: 1 PID: 6520 Comm: syz-fuzzer Not tainted 5.15.0-rc1-syzkaller #0 [ 1838.484773][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.484781][ C1] RIP: 0033:0x456e00 [ 1838.484796][ C1] Code: 28 c3 e8 e3 3a 01 00 0f 1f 00 e9 db fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <64> 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 73 03 00 00 48 83 ec [ 1838.484807][ C1] RSP: 002b:000000c0002c3df8 EFLAGS: 00000202 [ 1838.484821][ C1] RAX: 000000c00001c000 RBX: 000000c00027e400 RCX: 0000000000000000 [ 1838.484831][ C1] RDX: 000000c00001e768 RSI: 000000c0002c3dd0 RDI: 0000000022743b46 [ 1838.484840][ C1] RBP: 000000c0002c3e40 R08: 00007ffec03ae080 R09: 0000000000000010 [ 1838.484850][ C1] R10: 00007ffec03ae0b8 R11: 0000000000057df0 R12: 0000000000000003 [ 1838.484860][ C1] R13: 000000c000082780 R14: 000001ac1375ac84 R15: 000000c021587d40 [ 1838.484870][ C1] FS: 000000c00027e490 GS: 0000000000000000 [ 1838.548974][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 1838.548992][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc1-syzkaller #0 [ 1838.549010][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.549021][ T26] Call Trace: [ 1838.549030][ T26] dump_stack_lvl+0x1dc/0x2d8 [ 1838.549057][ T26] ? show_regs_print_info+0x12/0x12 [ 1838.549077][ T26] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1838.549113][ T26] panic+0x2d6/0x810 [ 1838.549132][ T26] ? schedule_preempt_disabled+0x20/0x20 [ 1838.549154][ T26] ? nmi_trigger_cpumask_backtrace+0x201/0x280 [ 1838.549176][ T26] ? nmi_panic+0x90/0x90 [ 1838.549199][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 1838.549221][ T26] ? nmi_trigger_cpumask_backtrace+0x201/0x280 [ 1838.549241][ T26] ? nmi_trigger_cpumask_backtrace+0x261/0x280 [ 1838.549269][ T26] watchdog+0xc95/0xca0 [ 1838.549303][ T26] kthread+0x453/0x480 [ 1838.549322][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1838.549339][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1838.549359][ T26] ret_from_fork+0x1f/0x30 [ 1838.549662][ T26] Kernel Offset: disabled [ 1838.695842][ T26] Rebooting in 86400 seconds..