&(0x7f0000002800)={&(0x7f0000002700), 0xc, &(0x7f00000027c0)={0x0}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x1, 0x5a, 0x0, @local, @dev={0xfe, 0x80, [], 0x15}, 0x80, 0x8000, 0x7, 0x81}}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x8, 0x40, 0x5a, @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x700, 0xaad, 0x1}}) setsockopt$inet6_buf(r0, 0x29, 0x4c, &(0x7f0000000100)="94df78a45a60b0", 0x7) 00:38:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@getnexthop={0x20, 0x6a, 0x381, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x0) 00:38:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_PORT={0x6}]}}}]}, 0x4c}}, 0x20004040) 00:38:42 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000020c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) getpeername$unix(0xffffffffffffffff, &(0x7f00000021c0)=@abs, &(0x7f0000002100)=0x6e) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x20, 0x0, 0x28a3, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x2e, 0x0, @buffer={0x0, 0x40000, &(0x7f0000002500)=""/208}, &(0x7f0000002480)="825c1ab51c2ba2f86f9cca4433ec6a38b89349ac70ae3464b1bc2a83f0e6980b9b474094bfdfde522796d65744a2", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x1c}}, 0x0) 00:38:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6}]}}}]}, 0x44}}, 0x20004040) 00:38:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1, &(0x7f0000000000)="2f6b7b16", 0x4) 00:38:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x10, 0x0, &(0x7f00000001c0)) 00:38:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 00:38:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_devices(r0, &(0x7f0000000080)={'b', ' *:* ', 'rw\x00'}, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x80, 0x1f, 0x2, 0x5, 0x0, 0x5, 0x200, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x3f}, 0x4800, 0x5, 0x0, 0x3, 0x8, 0x1, 0x100}, r3, 0xd, r4, 0x0) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x1, &(0x7f0000000000)='b'}, 0x30) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 00:38:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x510e02, 0x0) 00:38:45 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:38:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x20004040) 00:38:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24044844) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x13002ee0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff0f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ff0900bfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b704000010fdff1f6a0700fe00000000850000002f000000b70000000a00000095000000000000006458c222375e37391b130150c62fc2868f020000000000000013a80c19aab9d611f5969f62c28b22756bedf3cf393d14c46cc4f716da4f0de8163f6242fa7323f1740637c48468766a1841439fce41f144631ac262dcae1868ca7675d7dc0349c0557ea5086ec3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558050400ff0498dc4ea1d75d3066d52dbb55d0e331a5fb33abadd3a0c218078be8d75aabad71bfc70281251ab136740a4700003d114e024762f07612b1c3d686f1264c8fc62e06000000fda8c226f236b2b017b569762fa39884bd1dc08eb9d6c91b9364b7bcf572d0cb617949863303de732a92ce1bdc2fc568652ea4e96ceb14693c000000001000000000000000000000000000ae8d804b53c7e864d994800486ce4d2f3b58a947ef31f1d41d2b16454add03e2aec5f9c93f9d3e43a52d2c615cdd265e649c770cfa9b47b812c79bf0a685ce152bc4fdb7c49e5c4643ff8902"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) 00:38:45 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/pid_for_children\x00') 00:38:45 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c2e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56bffcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e702080000005efd90c8c48358f8dbe82e16cf000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffc91a869db7605202f964e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326be6a7905ef7de375ef8bc8143df20d13c37db269971210faa7071e93094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2da0f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbdb957fc1de55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a19ecb713559075b6f0dd1236ce12a86fc60a2d4f658ac161164c52acd01348669305dd52da9668f683134afa2b973aa73a4b9d42fdd6c14d9e6200de42e6b42f2d1ecf20510ece2ae343796f9e95580be2c37945a6b6144cef685a9eeffc44d940d22cf0ef08c972d11b36eba1f6e26e354475c30171ab0ff869d4d04c2dec6a0000007d27c7c7269bed9d643881327ce7a3418215997b97289892e1dd1c9c28516dfa93b82c5e62f7013109dc92c0f84a8c0000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 00:38:45 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000017c0)='c', 0x1}, {0x0}], 0x2}, 0x0) 00:38:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x20004040) 00:38:46 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x20081, 0x0) 00:38:46 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120db9b9e9119ed5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:38:46 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095fc000000000000850000000c00001a851000d6feffffff95000000000000009b85e9dc5b7a21b4f81c451171"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xb6, &(0x7f0000000400)=""/182, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x11, &(0x7f0000000140), 0x2}, 0x70) 00:38:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, &(0x7f0000001100)=""/245, 0x26, 0xf5, 0x1}, 0x20) 00:38:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x20004040) 00:38:49 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:38:49 executing program 0: bpf$BPF_LINK_UPDATE(0x17, 0x0, 0x0) 00:38:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24044844) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x13000011, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ff0900bfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b704000010fdff1f6a0700fe00000000850000002f000000b70000000a00000095000000000000006458c222375e37391b130150c62fc2868f020000000000000013a80c19aab9d611f5969f62c28b22756bedf3cf393d14c46cc4f716da4f0de8163f6242fa7323f1740637c48468766a1841439fce41f144631ac262dcae1868ca7675d7dc0349c0557ea5086ec3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558050400ff0498dc4ea1d75d3066d52dbb55d0e331a5fb33abadd3a0c218078be8d75aabad71bfc70281251ab136740a4700003d114e024762f07612b1c3d686f1264c8fc62e06000000fda8c226f236b2b017b569762fa39884bd1dc08eb9d6c91b9364b7bcf572d0cb617949"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) 00:38:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000400)={0x0, 0xb, 0x0}) 00:38:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="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"}) 00:38:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6}]}}}]}, 0x44}}, 0x0) 00:38:49 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000006280)={&(0x7f0000003800), 0xc, &(0x7f0000006240)={&(0x7f0000003d00)={0x1c, r0, 0x4, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x4040055) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xe4b1}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x7fff}], 0x1, 0x0) 00:38:49 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[0xfffffff9, 0x20, 0x7ff, 0x0]}) r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) tkill(r4, 0x10) 00:38:49 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0xffffffffffffffda}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000100)) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x1279, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ftruncate(0xffffffffffffffff, 0x1) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 00:38:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') preadv2(r0, &(0x7f00000011c0)=[{&(0x7f000000e400)=""/222, 0xde}], 0x1, 0x4, 0x0, 0x0) 00:38:49 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:38:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x4b33, &(0x7f0000000000)) 00:38:52 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:38:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000400)="945a", 0x2) 00:38:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) 00:38:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv2(r0, &(0x7f00000011c0)=[{&(0x7f0000000140)=""/222, 0xde}], 0x1, 0x4, 0x0, 0x0) 00:38:52 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ftruncate(0xffffffffffffffff, 0x8208200) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x40, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r1, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) 00:38:52 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)) 00:38:53 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000b2f192760000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='objagg_obj_destroy\x00', r0}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x40, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r1, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:38:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x4b48, &(0x7f0000000000)) 00:38:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, 0x0) 00:38:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/122) 00:38:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 00:38:53 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28}, 0x28) dup3(r4, r1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000640)="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", 0x2000, 0xfffffffffffffffd) 00:38:55 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:38:55 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f0000000080)) 00:38:55 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) shmctl$IPC_RMID(r0, 0x0) 00:38:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f00000010c0)='./file0\x00', 0x0) dup3(r1, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x3) 00:38:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = epoll_create(0x7fff) dup3(r2, r1, 0x0) epoll_wait(r0, &(0x7f0000008f00)=[{}], 0x1, 0x0) 00:38:55 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28}, 0x28) dup3(r4, r1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000640)="f5697cde5af469ba08571185f9fa6f7022461b96f660972b63a277e3c7fbe693a0746b3b3dda0c7d072d257af34e3fb21ec9e3e6cf99d2a1bd74d8a1e30db63d83e72c15b4d3b0b20baea11c05ef87ca950bd2ac4f4061e5f5f0698620b87bd44208b0c737d2b0aad5b634976413b1561dd08b2f900aff3dc3824327bcdca0f798e7112f877079ad8a554e6622e2950b76ce84cf94165ef2c0b0bc2587a20770d05fb803a095b1a11fb514920d010c131ad1b82b8211060e0402e377a736f98c7d4b41fa69438f893868d021c4626ad86dcfd1ab79b1b97a00c5fadb7da9e92c815b25aab2704b9db6811a53f1abda22ae584c39f2f97c01c457120291bd45f18068a50d22934588af5b3dec6292c8e7654645771e6bb8dbea95ebe1786358c21d4ac44d53a58f06b8c6781e822f2431152ad8e0810835c2253cc8a7efebe8332eb8818064bc0d4567c7bd17e187ee6761a19f7c7f2c5147eda7e8c4d6836c25778c883529e6dd1d2cf605e1234d515db26d7cf20f8618ff7b91c58b70d814da828d0b7b71a949cd3be8b8523b98ac4a65bb40636b3b9cbf9002666d336be2830be7bfd5fb3056f3adc296d9bb4d656bb4f9d943d9a680aabf4fda65a2202e0cbe9561960af9fe432db4522cb80846569bbd9bb62bf75864caf62bed506dc92f39f06554a87279d9eaf5f947b193d661779d4072e226d8a7ca79eda13d0298c8bf175381d1083685a108d282d2556d742ab3da071ccb38041dcb32c6ab7deee977faf6a87a6d0e8253feb9f6dd147337884795c983b6d2f60368da44b6739581926f8342f672650d8836a4d6d5dc6e18ce05896e262b99223bc7013e18dad1e3d1dd7ffa71e9e6599efe2de1bf46f38e6c93227f95c11240bfa3d9cddd09e1f1d11da9bacc1c041f2ca00bb8dab08b33a46573da14434a0642138a9c5ff2d6303192d1f5361ceda76d311e6c5cba35778edd930f165c154be31749b7913721a77365c010168a515660f3e63f7953774bdd49c5f1a10a37c1c670dc0e0859ffdf3dacec2327a4a5e3b9185c4ed0e6783ffebdc0fa6a0664398aa61a80eab804a6c030a1e10793c7f85cde0cfba34915b3997843d592d8173b88847f79b9cbe1ebbf6bae434bac55716ceeedf62815555bb949a5705a33e70e484dd9369fc640f493adf24839ce5388781ebcccf0909643dadfa9763c72742a659b3835941bceee817312ac016bb4487d79b363d1e0c2372a17559d6529c4d1ee89e0a545180811d930e1762525c7ca0637c15bfc023af61caafd2ac202df295cf547faa4c3e4b9eb25e6d8972288b2ceff2b6b244d5a38d1d10f50218763da4e55f6f5efc8e0ad031713bdf6f37a4141e9f96c05e294d315f057d0962e89cce7267f57178e2ef9d9e9c4379aead872aa7fc217a7b5a3659a7e0f585ec36435e520868fb9b26a8327be92bb2ac0fa12fc207fd6ce4f24b99f99747a87883e86473644af1cd156d449fa0e4ece911c44efdab0388200227ca85b22da3ba4101f6797db3e63f2458f4b1f9e4de3d30dd10442958bca7527b891d320d56e12761d0265c0f9cf8958555b2d607b7e72f81532371d0b8a0190f8a25b7b2f773a70d114af3f5fe0bfca3a3120bfd00a73ab17d0a880bdb9b85091596ef9642cf71bcb33e17c78cf9284cd66a0edf49d280f686000cc1cd712dbb2be74940c033044c479d03e4346f6312b1550cb803a08e102d97b37b53ce3574c402697a97e083439e51ab6d675e6d465f1beaa24ec9a4eb66cf2df5907a2c1d25f4cc4d97ae5f11a86351b210a7de5d5f76b7445744c6ad167048ce24aef2af961bbcda918400cdd2a45d8100eeff7981e5faa8a04d9de9f7a2e76be02931d341d0febaf580553e2b4cbe9b99282df6029957e497fe087c937c3e6ac24db32434d0b190854480d97781fc27f43ce1ce7e932b52869350ad2fc0f616343e43cf2cd9f03f35496ad809ab2b1d7d76ced4f63519fc6dbccacdcbf01a56874361a8383d6911903f282f465aadf1f84faade33e4cb73333808093eaefad6c0965d55eac101629661152740399356038a6015c26d1209578b878c13d2d331024082d5b426bee31a9fedad08cba217ccd44f5307c229dbcce46d33a71a776b3d8b0ddf010efe96d26ccc4aaacb4ed831deb5bacf845245bfb0397c019b1a1406e64b5b7a706bc95cdd826b9275df97cab2a9d2d107478c49c93814dc724b2ddf3a2c30d88752f40b88da5c5c5fa858d4d318df61de246869a3078fd6177e3906f35e779df38eddd0de3166ce9bd53a05e8e5f5901e0c744c94e5b09b8f7f590cf6887bb815dad3db0a8bc510941be7d359ab985eddcedd28470da9d5a4beb34d7fae995ab862bda6bebec14749a3f095bbac566a2212474ed11c48736fa35aa95abb33fb75f212545a99e82f9aae97df561bb318b0d8c959c5f2785ac21a4c062c89ea4b8a20098d0e8898d717c8d14cfef425f7c023bf9a45516aa790c77db351dd54e9f7686cab4ea12061ced1f45455d7e4490fde38796363425aa78d1c596f89e1a218c52288b3fc8119058f5e736a090cb087286f69eafda00355e1335600377de54a81ef7ccd1cc67687dfa28c4c708b4cc339a1cdb074412b8a4548d300e04ec42e1bbc06b8c4aff337d98ed0e550bdee5537e622977b57e7076a09e8f8888c114cf89e084d52c854f90080380c600a61b2be7b1168f4737807fffc11052ced695d98c46d8d8538f6944057db6b65b122b29cfabbbf2b524d85a4764e48dfd1371bc2a78bdfaa83da6f9797979b1939c726c878b5b4f7c9a925a0e2c61325489d08f00e02b4adfc1375ef87c2d4f1802f55869db657cc5488e16e5014aea73c6360d1c3fec27497b54582cfcd5e201149a56a9b94a347efcf6ca5a29ab1bbb2b55a7264a98e9ab38bee0d9096b9855c5ec4222cbe10401053fc4681af063fbd337f7a32ff5787f67ba56dbe17a5533f300f165ec3ea00c3e0ede31d3d9a2b718a4b5a1c1e9a0b1f0c6a62871798cbbfd32673db6c4024c64b0d4bd0752c30cb2e4a1e94c3a5031dcdc6af24cc82db698368d9326730622f3a9016efba643d3891c4b6ca03fbb550c31060d4cf29d48ebb8db5f277650d6b5064cd474b39d303a4b1907dc8ed25e9fe22bfaa6f344e7fff33901f3c6180461359c8a48e1006d15f91fa9383318a186db50d743c61bb84165be61855105e73a0d2392cf7617e5c3892132d4c7519039e3ce1f40bb105015e85a820950b0ae80768a03c1a78822b873bc7cef62e8b777a7df47508a664c4738e13cc3a9c06e585963a13bd10a3c0d68ecdbf2b36a917282ccd8380932c377d573f048840b22f973323111ff50a4d36a86bb19d650a6282b2e24763057e64815883c37f71dc55c69976bbf6918a6dd8a8590c8f68d14ddbca6bcf3a7e28f15256b9888fb1550663befa0534f3f0b0b41548560f7406d8a71a42932c3aff89fbcb66847a783cd0db185933d5bf68a8bcd749ccab3c05009339f3ae2c9be7b158eca7b30544350cf1583c98a2e7b05fcce7c1986c9f39d54f13da00a0fe2a78840e1d0bfc77a502105db11e89595f14d1af204395da595517f12a14886d12910ed58cceec67c7668932b3304cdb923c2d212d33f04f9ee5479f0037c733b249425fb47d83ede8349d2b50ca982dfef1dd639c2670d8981a6b651dfcf8ae90d3265d2c8406f78b3208968ce22227cf9fa85f2b2dc6fce8777519f2e07f400643e2a1440064e544d9cf28657cf91ec823bef3cd2d520a356833d42a1d657bede921fac5071cdf79254a124c0ac57a2b5c60cc99a8d007b7c0bbd17d11aa883330cfca640c300037e7c69a27802d57ac79d555d7751e8597494b3daf60dca16f4bdf30a2b61cd002500def1a68ca6d67160b77816b58086202c3a08cf92b7e5143c8a62a28c8cece647556039474ee36bc3d4ac810f7b1c87812713270385de80aa2879197a8a335b9b9e538654e6b60c7529f4355bc1251c58948ed12648b5b816fbd3069a57095a23f10339e57de0501eb3cf337af1e0645e9aaaf9d2c43b2054db37be136df5c48ec9492155e66fad965398a6909200b297eea9a88a337292e15507fc038d1e4efe015561d68f16b9d8faa703a2ef06ccf57b39d6e235de33ba1d2cff7c958ffbafe7df7d73e193cc467ffa9f04dc5f6a15207a5cc9df1b1a8b39fd111f992374ef3eee28d06a4c579e92b8c01714a72caaaa8e19a95abbc3dd2592956f6fadb5dd2c1f99602571f47e4384d321eee2dee1a79ae54e6f35eb96cb4f0012cad0ec5b1cda5b1fd2c3f055900fc29accfa7758eb7f93fcf6478327793cf42993482a3906bb5182fa10694e1ec444cc3bda3d8e3bd836501362cc9b40a4248a9f11f531db5e18ffa14eb18793145ad08df55d4c60910e49c7246990ff838efaf541026a3aab928f68b5883b47e0711cb9024643a06b92a72710809aef20876d0d086846c221ae7643563465f4284701fc7b73c8ee05d1d411b4aaded442804181724f9eaa87e259c125fb09f4df930d061735b201c6ae075deec53218483b0f7d907ff37def9d7f46d8159f7decd981ee219ac68f6cf61dd0cf8b81b2d3be0e6c62431e30025daa95dcf7b31af868b512c531f320cdf5f01f0304132b94f6a01980367f0667473df124fcf85f66dc018d46dca973edf404a306cfedfcd1d3c39e4b77e0fa64826877bee4d885f08ddc8307ddde13fdc81b99eecd5d584a2612cd60db1b80e165dc2684c28313565aa410c03e303aabf1d0e5b68a3be936a1e7bc743cb3ac9ad95d2c33e73d3d81930a177cc32a7e61af186de860b1b5605afb50149ee49727bf785d3385a98f247c48932960fdd49348f62bfc6d3039fbc29f0a579e64cc28ea4eb462d25eae07bc7122e6d1e948a35aa794e27ad741b2f30002caa6fffb231c94770a8519cabfd8cd0f30276e9d2579d0f2d9ba6aa779ef669f3d1f9c1bf14385338aa78628b575ae143857bf5807e49389c99715df1a74fe440d7518d29d40d784eb4a830ecb99d200849657fa633126580baf35f57186752402361a989cbd5e51faa462a5bce8e86acaf5216e130ddc243b9c096b1a5ffc8a39e509fdac5eee8c8d6d11e12b6c14f4ab4282b66530d412121b8ed214692575fd1c5a0a95cac393d60c1b4bacd06de134cc28334097cfa4af5b607932aa275342b5cae5cfe4aa28d7377f76f92c96d68ea2d9bdcd77d3da29cec54eb4af1c5a895a3c5bed93ea45dd84004493cb509568a3fff6db71b2721df3d1e23d02b1b324510b95db33c35c1d1dc1b7b3cfac03490e476a8dca44a4f7a5743a522de5d57776ea904b9cbd27273eae93ef7aece212060ea1ecc5553ade697bc8a9f7f72064d702473b60a5b884d28bf572277a157ac077df80a59ec6491d63cc49da16628078134697e278ff6dab2c22cff37596bfc8c6878eb98e2edd7b563564cb554baee92623ccbea2b91beeb602d3d072c2bc2c05d7f39c7df191a198a5d7cc85952b2b48eafda221f90e0b7af5ae15f66c52a68f48ff9a6eca63c308ec1e706eb95815c78cb5a80f8d8987e050070f2e2f3020c9c7aeeb7e99f6348fc99c0bf9f7b1a923bb22aa9e589dade21ca959bfdc98b994e74cbd79a0d0186d36e57a88c4d21c509acf389de5595b31537547192e764ecf6d44f3a0acbdcfd22112ae20c1a12da56e2a0628782aa13599b79ac10e36754a7dd942c7b9955777aa558e85438077d2368c3a7ab70d3c1783851b19def24e1fa6a2e2f588335c143ee8732a45bc79bb9afc151da84b63e822a417e9468aee1539bf67d551b9d852a6113692b2b65be3b7ca14ed19d663a40cab12e08da26e412d0860476b5131ced176d1158037d5fea318ca21683b15b0633eaacd092b8225ac1c24fa2ca84400ec7c243af8a26c3f2b065eec686ec569c5d507db38ae7a83da9992cd4b2a92f3fbb0049a6714391d75259c780c060715bb35b000a439346088ebf7bcb0732c7ff685cecebdf8f3c42ab210514fadeb641a07535cbc91fa4f90319fdc4c41b9d463fe9d9a5ce440349f51ee1b78e33c46cc4da985ae647aeb72e6fee05247f0efe948d4f54b6972d03711c388a43e959c0a76a623ede6806dada83fad98abdf1f548536ce3e2ffde3fad9653f13a5f414c70e9577735303e4496440ba144ec09e3a508aed61bc747f61d57c8efc8f686c4120fd18a5b9c4fcd07d1f4ecc82512c4e03a3334564a5b67c8eae19cc3edd2641f8f1e78f40aeb57f48b6906a869ee1f93d550c4d813fc8bc8f942468d7d566d0dff1bbf9c168f4cde4948cc9e4c5fbce912a528921d49e50993c4be83ae095c6cc23c656931a101012a28e09ad9eaced88bb452bcf821f5e2b0cf1cbbbee222e0c7c3a2163883bc3c520dab413b5d8828a750cb5d158870439412d65d4220adc732cccca7cad08e28ad08712ac7205e2d847a0375887360d1c84567eff290d984208b08e04fe5a1df58a6458bdabcc8284fe6af50a371a3de6452406f3dc32959b9f65448cff6a28ed7a11fce2781526762e5718a1f8720e4f8db9e4b5835956d5119923d607f258a39d3623530613c2d0a641991d8bfb890bf7d75c0999d5b1691d812593844c585f83364c28531c0fb52336a408fb48b194655fdcce6ec18611279b973c9779882364e5de412a7b780672a47155a520bee2d2ad622c89d1a6e171b8f5f86302a6b0e0a89d1908b10b98e1a3fd2b92be28da330bca1e5e02eb9755c471aef52f3b8326399910bcda9e534775dd8ea3b34121b188497a7d7bae8a65aebb2f55332196068c57f8c71dbbe00d93e10499232e7e02dc8e19c22e3b93d8ecda6bb80f2105d935c9aa7e20936711c5a981c8290c2e46d9114421c5d4d6e0bbfcf059c74cdcc39266c0c83f303235fb4985c09ebc1709f2f438284463d0fcddbb938c6b590d30df00d5a56ca22aca5c0296a73f031c2b4274b9ef118968f49428198b39a3c8b890823b28ed5ae8375bb123777e25bd9e96dc403c1b2aa42c968aa7ed44adf24e7aad9c6da91210fe88580cbbf84f05b2607547ad6c9c761e175d3652759dde319e30b459d7d44914b71c9aaee09055caace67a4049aafd8070e3ace01106de6b9e9268ff583f40a4a346b076b1becfa78e116f778cb9900e413746827198d6ad7a6d0e754c0cd8dcefd090cea6cc5de2efc6388d8ee9dea66326fc14a936d10c0c8a2cc6b0b7f6d904bc5d8a173b2df6a5f1b8ccad2d10a1322931bd8cee2c08faedc71ca4504ae3958d54775d018e0a296788caa4b25cfe0077f78da3288c9e1b9f673e0b1dab71333542c99a88de63aede29e23eafabdb586100f0c5348d8084ff2086729588d3ea9e5f34c81fe9edbf835e6ebd89fa4d7ce8b08ea06ca0cf9a795556639159fb4438821afc943aab333031f6c37e23a9215e60fe139cec3bd6b47b5a6f3c42b7b835e932db8195b68da7c9890a40f1cb3a4aa0e6063f148b16d53a964ffecd342479dff492a56c3e486d012a856966dc3bdfde2afed522b585d03bebef932c348096dc6641536a840fa7f6df1b2d7e91d1e734937557ac057f09cfea9927ca81a48fb9ba3d846adcd62ae82fb2470dbb4ab2b18cc69a616790b5ae926b0074857fc0cde4ffad9fb551746a42ca2eb5f89ec5e38798f4081a61222fa68685c0f0e004111abb222b692c3562957a9ff6974b9fee52eaa061132d595d4a76a5c07184da2a29fdf37a6792c820e65b487644cfdbf72780a5e37c537f4c9e9eefbff69601a94e4ab77692c3d3a29aba348e36b7d8c4ee7309c41aab08d59d98ed4880acb8069f0230c72fb090a48ce4d731d6dfd2c022d6a3392538c9cfb7e4f2774d7c5dc21f0cc4deab68571255c1f32a64becc6624a285f3e7ebe4daaa3c9667ef35479ad6790388832acc7ea78766b24392b7e85203208408b4c300cdb4654235ae6c961423ca2159ecf949189497a73b655170cac11cf0096f3f2a406ff2ebb002fb29624a9541ef78002c3b4cfb0eb5bdc5433e7dd65a1a235fe9b74fa30aa4c92f948953f6d7f7e199b0be8f642c2317dc19bb508c2f37f359fc124d7078fa53a92a058d18970705e5260b778647f39bb697b6182afb745559e4c536a52b0bd1235255280eaf0ce4db4af051fbeebf6e8d8f4c77d75692322b12adb765a5c16cf9a25f76516c72f9d5eb134d44c9a0e2aca9cbd390b04b2ed11716226cab1b743f068842c091f8a897378c40de40f4352ceb628cad947825bdae76e71bef6f9d41e662b8dc3026171cda9e286040894e9546ae72663f5f37a627ede4ca1e6a787be9c4d398d612af7e4d0b0ea6317d804e539d543856372f2690981762cbccb44445036f2d5a3876706ab0a9d5cf278fe02528386d4bc7c0b4eb1cce78308f4b992b8491e75a6ac2193f05e4cd34dc8cfdc209e000fc5600b08349e55ae6d0b3d0965740bb690662db88ae595a2cc3ad0435f09fee8027bcb378910beb0cc6b3689b9763b8e04de9bf9caff3eb9ec9d1b4abeb493129112e1381d07611ebcec47fa84b6ea34183c894c18c4cadfdf1605b4c8dffd8649acc561f61b90db54d7a0cd6a6be4df743144fb7725e98b07af66c66872e253ce477f436d57c00d5d7f6de7b3619033f584cc75768aa7552a647612f596b7cf6dc2fedba738c71e1ec41543549df3a95f0efdb330bc515a0fe3c399ec0670dbd0fdb7e3531fd85f3adda426e606232e4bf8f417c528c41c78a981a68e8886315461d511aa74611c5046f2ab79f2cc0f076943e5b728381bcc34634eb2ea416ef0f2dc2e7f36b2702e2492212e6d40159e8504ac918e18d964c21239a577331c4d8458c1cf7a1450a2ebfd7678086e1def827e9efc48d1aa1c98bf7a6186ebed203add376eb52fe9067f8653effe121280babded11135a23502abde3af9d89ddb34dcc4a60efcc4a8519a8a60d9a596df6a7ff26297e80000500412c3eed0b9c24c9df814ee1789a4829e49c18f95de3220c0c1e587d16abf4365862bf30e709571835e740fce5036bea0eac1a6aad8efefb11a0107b75511c398ea1f08d98f86c3c107f255787031153d42c2e180f90566a6120b76103d7a28dac6a5fb0df6ab097c3db8636d7cb164cb7e7d20c4b88a2d62f7f04307869a139ab6d929056b1f271cbb2c403ca1eb353f30f8bfc77a289e8d7bcdf5999ca483319dc0661e2b39880fe0e2e07bac594a9067260a85ce693a49b03dc6cd706c9a0ee5ff9fedd1a89eac1206be3dbdaaed63b77b38ffc828941cecd85bb987db1d65bb6f1effdd7729bb2f28b76c1b73e8d341357bb442a33e106573ff6828885656d07a00c826be9c1ef8846e83f4c7b4b89faa26a6b107ab0c39a707dab65376374a350bc0bff0603442925b99bd3984c20dd19a974ff35d0544eac1bdcc41971aec77c07e0f72bb46d17cba156ca38cd06f91dd56d1d39a13797950ee29eb2882a4c9f007bddd7d5bdce88776e514700756fdbfff4d4ef7d0d4a663d8bf22f9c6fbd8e89dbb95b91a1d6b7cb4e973dc67cfffb8649b5c0f034fc7f156dd9f286edef160cc8489031dc3accb7b8c4a7fc6a0fd229802eac8ca8b336e224337f265f950ae6d9b14878c645783d79374dbc5c5842c60dd473cdd0885893ff980f0214ee5204eeed8565704e04483bc6a244077a1432059c6c773854809440267950c6d99a9ac781be9cb2c5d14447257472dbd5000e1a61ee5850dbc118824bd53ab5fb818e579b4b47e8325fa066b1e4cdb7549172ce9ca9b3f0653c7fecec0e462fd06aa387284cf22ac52e786651ddc217ac61d565d7af2aea96864bb15bda79f935e6297191e7093276891da93ab897243335fcf39de9d3f4163b9f1362879f6324a0c2f94bfd15644e475b30f7ec3e387a283c18cab47d41b2522d2c6ad0cc787d8d848eb5f1e16f5a53f6288f3dd6b30bf7159d2eb3015283abd08f5b525466b9c0b18430c660583eea0ebd3a80371e31a1567f7c8777e7ca75f0a71a60f919eef8a987f0563f80949c22a2a2fbf211a0ead9a768d66d124f979e1283f9cc100ddbf6e59e1d5a85665c3b69e4df8fd32771f7716b3649a08f22b85b10d652c2d5d3dd28a45cbf88bcbface3211210a2797b7e10d0dd1a057dfde82e18883074b9448f5a41286ca68bdc0e371b693269778baeddcb0943596abbb0f0ebc73ac9c7b8e4314fa98ea3217eb5982ca76474aba05139fc52baa3b2f42482e09e3d3a74ef41ebf9a12e0d29dfd772abaeb87c8cde15b22f2c4164006a141f5a698b05a4820923348f21850d63a8f75537d7b58652ea91c857298904694694db075813521c72f3750470cfeafb1a21d65bd7b442b9b58673bdc3babe6c7600dcc6ffe49cbb7d0fdb0e295eaf95b487d4d0ede90575425f48f08b3bffb9fa0ca539e9e127ada322479aa2a7ef074062ba7053cbf2276c25921ac60dcc58807ed90b3f14de1e4ba8c9d3fc8f18ccabefa8dd22bb159bd1b19c723d47e150bf44f23336fef47e5a6b96364d5809b629bec05c8fba98fb4a1bb6c860b127202c34b06c300c041253308c57bc193aaf02e6755ea31fc9c5d3562fa7fa6a7449f1016d575d5ff629f7ec85344aecf3535ad667be5581cbe7bdde95ada1934999bcb370f1de98d730554e0f2157069278c075fd1c71376779e7e0c26f79b81b591504d1df311d9bbfd48c78c199a0022212815d723b9b595f0000dd58f8870b8a1e7cb975cf0c5505a30173891211f2199d6dfd1b0f6a1cc8d447c4485feba0ccb22f68a1495b669a03f8413a5fe59ff5d2893a7bece5d84d4ac1d558fd2653bf96abc50ee71d9ca3bbacebf272f4f7cb05baff001960c6249dc82031cbc7051973b65091f711b3bf13d207dbf2c1d404035230f444d7e9de25c33203589cffa7c8ada88c7c9d868fd0d839114dc71d628a1114303f678dfb83be66d6084b4be30a23bcc82188e3a6ee77b2df30b72a113d22137df9c6db643ad8c99f39b8daeb81635e98330ec65b31ff06f2542d6f47c0c82ca36b5614860e1047428ab1c24379ac3d27d648f04bab378a5102ab26d0e131ac3643dccdece9c0df23654c9426a4f32f8abca08a9b3b09b20b562256d2fcca2b71e24bda7ac7d23dc4fd227c0628f7c78810a3fc15fc08d6e5cd5d4f49c407574056dfbe512bcc5f7ab3644ee68abd90929f3f024b30bfc64618d8216de16cf79cc329c7523a2f5aafbd21516ddbe281eef4b62c332468d659806b5cc9a148973e8b0c86f61e6cc29317f27bde00a88c1ad56c858cf06d5dd4ab4794301a832e0c587eb4f2b562f30f1f1a1f9dd1631c43550d85c9a45d9253652107e7d2a2f0df833714c5688af9e0271217d9662f655a7cfe3535dfd11f06f7437f049a41cfee42cc0a1076f8b767b38b4d9b8c71345cbf6f6877b68a78035bb560d529ff0ad047a00ec3a1daef84bb86e527d25e98f99639f6c5d96ef51a1068afff0d0ca1751c88983879d0b7539e9fbc03966dbbfa0ac97c2fb8c70394db8fab3c8c160448cf782dd406ce7850ade8a6545e95d6886df28f82eda48de91ab5865167d", 0x2000, 0xfffffffffffffffd) 00:38:56 executing program 3: ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) select(0x40, &(0x7f0000000700), &(0x7f0000000740)={0x4}, 0x0, &(0x7f00000007c0)={0x77359400}) socket$kcm(0x29, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f0000001e00)=[{{&(0x7f0000000840)=@pppoe={0x18, 0x0, {0x0, @dev, 'veth0_to_hsr\x00'}}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=[@timestamping={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0)='l2tp\x00') 00:38:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}], 0x28}, 0x40) 00:38:56 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 00:38:56 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x29, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) 00:38:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000180)=@unspec={0x7}, 0xc) 00:38:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000003d80)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000052c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x2, 0x0) [ 957.027645][ T8517] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 957.278475][ T8517] usb 4-1: Using ep0 maxpacket: 16 [ 957.417221][ T8517] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.428358][ T8517] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.441788][ T8517] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.452053][ T8517] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 957.462003][ T8517] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.471889][ T8517] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 957.723652][ T8517] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.732904][ T8517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.742825][ T8517] usb 4-1: Product: syz [ 957.749121][ T8517] usb 4-1: Manufacturer: syz [ 957.754579][ T8517] usb 4-1: SerialNumber: syz [ 958.099563][ T8517] cdc_ncm 4-1:1.0: bind() failure [ 958.113411][ T8517] cdc_ncm 4-1:1.1: bind() failure [ 958.154148][ T8517] usb 4-1: USB disconnect, device number 18 00:38:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:38:59 executing program 2: socket(0x200000000000011, 0x3, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x48, 0x0, "79f5f87bac2eb535ceb01358de8e5a432bf4e8c25033938f42cc955bb46ea0b0aefca67ecaa0a9ad952a94b67da65d81fc6f672fed9b07d7f8e02587ff01fc5f3603b9d914457c0b69e190d9d0a2adea"}, 0xd8) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xd0070000}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0x100000530) 00:38:59 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28}, 0x28) dup3(r4, r1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000640)="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", 0x2000, 0xfffffffffffffffd) 00:38:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001cc0)) 00:38:59 executing program 0: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) 00:38:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xfffffffd, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="240c496b6026514b2dcd", 0xa, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:38:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000700)="b1f5b0ceced7667a3928840a19186daf1ad680e5b24d3e605472fc0fab103db479741224f3128b749796dba477b6ad7189c87ed4ce5a6b6ae7515c1d2b3c9056a777352d8152b123a5e3264799a4f5e154358853387142186aea21a9df3b3082c2782ae118e3fbe6d680d5a0e6141a3b2a06a2df8ddb6324d470027056443e8b78b73aa27f14274f758e41b34fc457708795704f10b6095c06eec3be7c56e978ce201d8dd056ade865a52ae97ade594ec16b85d1ba09ff9a3346c640d913160aa3fa56eeb3183e0ea02c1a97fa4691387f7ee844", 0xd4}, {&(0x7f0000000680)="e0ae68a6b4fe64363593cff8f52aee24464dccef0edbdb28f5df6cafff5da766391fea5bdc3a53c5c4abb9", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="dc04a634e5e7c88c48ed4487d3539a21f833671902ddf8f1e95267c2f45c96cf721a3736c360dfd83e5f0223e176b76acae943c69f8532e3b8e1d45129bf5c7e28805788de37ec6b6cf7bc3fbefc327297f89c9dff10de6361175e60961ac5f08df7902a3b5e61d63f88c3cc0611810356c9c62657dd9bf9d9f0fc7aef8ee807819f39efff18548a4df0cf98b495c23cc7e91d19c441ebf09ef2f32c7152618a03624e89611f18142467db4ecaadb0a68ddc0891e7d7ede95078e62c260fa7b15a140bde", 0xc4}, {&(0x7f00000009c0)="fb14d54fe303c2298b2fe592c4c90116f52372a40e4b04afa2c7c1ff076e29b59b50d47d3ff1d1736887fb28f8bec853a79955eac4abeb50a17393a866f95aea71846c42f3c85c383eec4c211bf5d3ea9b0046b26cbe382f36a4", 0x5a}, {&(0x7f0000000a40)="86128ab5e48aff318ed5c89f0cc08a0cb7dc854578d89f1392091801dc84248e2ef41135fd7f24cccbfd961b64e9cc91f9b3e8e21c3bc693a538365bf6a211b50aae2ab4e346c9ab9ef66f37ec9ca3a068efd7d6e9637bd6587aa817dffa407cd4c8666478aebe56e659763a649fcb758056bfccbf7a722149d83aa6", 0x7c}], 0x3}}, {{&(0x7f0000000b00)=@isdn={0x22, 0x80, 0x2, 0x50}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)="b183307b2ec31dac2202f38c3005c2904ae317b3cb6b4f1c7a881136b755640b5337b7cde235561b3989ab6673825a18a70b9d66853e56f1e7f8d6b8dea5d4ecda371993707607520d", 0x49}, {&(0x7f0000000c00)="6b10f4c4461e9768b46dbc7d03fee5c773205a31d6fc6559844767ac2d53688345c2e7979ee697dc597264b2bc", 0x2d}, {&(0x7f0000000c40)="d9b5ee56d523948f1a9b6534acbbf2f47735467acb29035db9be7754f2a0caf10b48004607c173200b1db179c13f30cf60c39ae73f592e8e5ebb1492029f14074b09be0734c5e15124d3660047c81635eb865d4c0fe4730122c1df0206ac1f454c00e81542d89ebabc28aaac6cc22bc37cba301e7b4ad29effab82d2ec09f839d752c17f347a49433cd87de81bba201802d286d0cbb4dafa41541bfb481cdce489abf451785265b6ecba6a6771", 0xad}, {&(0x7f0000000d00)="054f", 0x2}, {&(0x7f0000000d40)="90fea1eafbf998072a279e599ff4ac7a320f00b40ea07609fb1d3d932d6f819d80c4f59c025dde3ff6db38149837036bf779ac73925bcbd7ff13ba1756241c5b622c4aeb481169c22377da27540dec4741ad59dc60e18e6857f52e2b18a7bfc93eab90b8135a2e88545547df3ce032cb6c9c97051fb8d13e63243733fe105d7f45adc042261284635c407782cc81d21675fea38edb42261db7839e067d9893cfd4d1a1dc308a42868d40eed5ff18676510c1f825b1efd4133caa9f6a18cbe5ac5e3d87864d215d954fde668a1060", 0xce}], 0x5, &(0x7f0000001f40)=[{0x98, 0x10f, 0x80000000, "f0b7ef6b67e6e6dd416cbff1a38494d82b0079e394d53abe29e362ac958aa2df914ec7b3b70482623ac1273dc350742799e23374f30d25ad0a9f2f29a319cabe0f7f69c6debd423dc88358993a23bd53772105cefbf3b9baae80e033830c3ed62882e783ab4417c3afd554e936ca107b61775313300e7f42644bf36e89ea5d826cb5"}, {0xe8, 0x108, 0x10000, "d3ff0581f6e2d11c06bf6667b84882c058d301275063d55004c19dbcd0232b97578e2fe75ae49e3208aad340d7ccdf86396a6320b9ae525715f38efecb78655d53f5d36db76464ec3d416537fe7881b8231b79e490686d7ab79d05e174dd2eb5e76b5fd2a61f7f49a438c7e39dc61f3e2a24f79fc184659f31c448b8d011a83748c18a257dd0bd8bba4dde8934d6278e0bf2253ae5ede4b6961ac02f9082f2e18b8af5d427656d732c2c0fa7835200400ba546152c0613f3b9a87ff7a827627a6b8b3e43fab30a1b96bf26e33e79b23df6442342"}, {0xd0, 0x110, 0x6, "170cb73227a1d54c3a98ff822a20d92aec3b1a1a752f0752b51a0a79da6c751a0de38a522ee6e807e55b4138a95bc4a37da3014380a301bbd86e1f649ea65e938096598fd66d1eca0f48e25f8d75bce3de43ee7bab8b49862f8a7a191396634ea707da4756ab6167072eb8f781f655c1a79076fbb49cac62f41d00986fed8b53c060f5044d45512cff729a6f6e4445991562b3f7c8de1854e0c16fb7bc2b40dd3ea10aabf60d15bf27f47b73ea656f54b0afb4e05559fa4e7299bc44"}], 0x250}}], 0x3, 0x8084) 00:38:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000000c0)=""/147, 0x32, 0x93, 0x1}, 0x20) 00:38:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ff000000000000000100000002"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc5, &(0x7f00000000c0)=""/197, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:38:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) 00:39:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:39:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000800)=0x7f, 0x4) 00:39:02 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:02 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28}, 0x28) dup3(r4, r1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000640)="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", 0x2000, 0xfffffffffffffffd) 00:39:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000580)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x5c) 00:39:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000121) 00:39:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x13, &(0x7f0000000040)={@multicast1, @remote}, 0xc) 00:39:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="240c496b6026514b2dcdd9f58906", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:39:02 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:39:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@in={0x2, 0x0, @remote}, 0x80) 00:39:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="1084", 0x2}], 0x1, &(0x7f00000007c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x68}}], 0x1, 0x0) 00:39:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_ivalue}) 00:39:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0xfffffffffffffffe) 00:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) 00:39:05 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) 00:39:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="6392", 0x2}], 0x1}}], 0x1, 0x810) 00:39:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x7, &(0x7f0000000180)="91", 0x1) 00:39:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002080, 0x0, 0x0) 00:39:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002740)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x3b0, 0x3b0, 0x140, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'veth0\x00', 'geneve0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "0511"}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x248, 0x270, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @empty, @rand_addr=' \x01\x00', @ipv4={[], [], @broadcast}, @mcast1, @ipv4={[], [], @dev}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @private2, @empty, @loopback, @empty, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1]}}, @common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv6=@dev, @ipv4=@remote, @ipv6=@private0, @ipv4=@private}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ipv6={@ipv4={[], [], @private}, @private0, [], [], 'geneve1\x00', 'wlan0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3) [ 966.184843][T20195] x_tables: duplicate underflow at hook 2 00:39:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x18, &(0x7f0000000040)={@multicast1, @remote}, 0xc) 00:39:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000700)=0x1ff, 0x4) 00:39:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x14, &(0x7f0000002740)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x3b0, 0x3b0, 0x140, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'veth0\x00', 'geneve0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "0511"}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x248, 0x270, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @empty, @rand_addr=' \x01\x00', @ipv4={[], [], @broadcast}, @mcast1, @ipv4={[], [], @dev}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @private2, @empty, @loopback, @empty, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1]}}, @common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv6=@dev, @ipv4=@remote, @ipv6=@private0, @ipv4=@private}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ipv6={@ipv4={[], [], @private}, @private0, [], [], 'geneve1\x00', 'wlan0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3) 00:39:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0xc01047d0, 0x0) 00:39:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={0x0}}, 0x0) 00:39:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) 00:39:08 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @ptr]}}, 0x0, 0xde}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000001c0)=0x6, 0x4) 00:39:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000014c0)='wg1\x00', 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:39:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) 00:39:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:39:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, @isdn, 0xa2e6, 0x0, 0x0, 0x0, 0x4}) 00:39:09 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040)) 00:39:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000200)=0x9, 0x4) 00:39:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000040)={@multicast1, @remote}, 0xc) 00:39:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002740)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x3b0, 0x3b0, 0x140, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'veth0\x00', 'geneve0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "0511"}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x248, 0x270, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @empty, @rand_addr=' \x01\x00', @ipv4={[], [], @broadcast}, @mcast1, @ipv4={[], [], @dev}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @private2, @empty, @loopback, @empty, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1]}}, @common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv6=@dev, @ipv4=@remote, @ipv6=@private0, @ipv4=@private}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ipv6={@ipv4={[], [], @private}, @private0, [], [], 'geneve1\x00', 'wlan0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[0x2], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) 00:39:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 00:39:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @ptr]}}, 0x0, 0xde}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x80108906, 0x0) 00:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x1600bd7c, 0x0, 0x0) 00:39:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002740)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x3b0, 0x3b0, 0x140, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'veth0\x00', 'geneve0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "0511"}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x248, 0x270, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @empty, @rand_addr=' \x01\x00', @ipv4={[], [], @broadcast}, @mcast1, @ipv4={[], [], @dev}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @private2, @empty, @loopback, @empty, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1]}}, @common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv6=@dev, @ipv4=@remote, @ipv6=@private0, @ipv4=@private}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ipv6={@ipv4={[], [], @private}, @private0, [], [], 'geneve1\x00', 'wlan0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x628) 00:39:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) 00:39:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="240c496b6026514b2dcdd9f588a8", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:39:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000), 0x4) 00:39:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140), 0x4) 00:39:10 executing program 0: pipe(&(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5450, 0x0) 00:39:10 executing program 3: pipe(&(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0xc0189436, 0x0) 00:39:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="240c496b6026514b2dcdd9f54063", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:39:10 executing program 2: bpf$BPF_BTF_LOAD(0xc, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) 00:39:12 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @ptr]}}, 0x0, 0xde}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x17, 0x0, 0x0) 00:39:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ip={@empty, @local, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 00:39:12 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@mss], 0x20000365) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000080)) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) 00:39:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="240c496b6026514b2dcdd9f54063", 0x5ee, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:39:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000005c0)=0x101, 0x4) [ 973.329477][T20299] x_tables: duplicate underflow at hook 3 00:39:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x40}}, 0x0) 00:39:13 executing program 4: socketpair(0x2, 0x3, 0x8, &(0x7f0000000240)) 00:39:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="240c496b6026514b2dcdd9f54305", 0x36, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, @isdn={0x22, 0x69, 0x6, 0x5, 0xaf}, 0xa2e6, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='veth1_to_bond\x00', 0x6, 0x2, 0x7fff}) 00:39:14 executing program 2: pipe(&(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x4020940d, 0x0) 00:39:14 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:14 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0xffffffffffffff4e) [ 974.891668][T20330] ptrace attach of "/root/syz-executor.5"[20329] was attempted by "/root/syz-executor.5"[20330] 00:39:14 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x1600bd7e, 0x0, 0x0) 00:39:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x1600bd80, &(0x7f0000000040)={@multicast1, @remote}, 0xc) 00:39:15 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x7, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x10}, 0x78) 00:39:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x8, &(0x7f0000000040)={@multicast1, @remote}, 0xc) 00:39:15 executing program 4: bpf$BPF_BTF_LOAD(0x1b, 0x0, 0x0) 00:39:15 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:15 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000880)='/dev/urandom\x00', 0x20000, 0x0) 00:39:15 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800, 0x0) 00:39:15 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 975.832177][T20355] ptrace attach of "/root/syz-executor.5"[20353] was attempted by "/root/syz-executor.5"[20355] 00:39:15 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:39:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 00:39:15 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x800) 00:39:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "17"}]}}, &(0x7f00000000c0)=""/187, 0x2a, 0xbb, 0x1}, 0x20) 00:39:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 00:39:16 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$sock(r0, 0x0, 0x0, 0x80) 00:39:16 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 00:39:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) 00:39:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:39:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:39:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 00:39:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:18 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 00:39:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x44000) 00:39:18 executing program 2: io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:39:18 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x101000, 0x0) 00:39:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 00:39:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x4000800) 00:39:19 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xa8ac1, 0x0) fcntl$dupfd(r0, 0x0, r0) 00:39:19 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 00:39:19 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x8440, 0x0) 00:39:19 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) 00:39:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x800) 00:39:22 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000006c0), 0x0, 0x0, 0x0) 00:39:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 00:39:22 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:39:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={0x0}}, 0x800) 00:39:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000003280), 0x4) 00:39:22 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 00:39:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b360a0e42546a9b374194370890e0878fdb1ac6e7049b75b4956c409a472a5b67f3988f7ef31952a981ffe8d178708c523c921b1b4d4b0a169b71d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a07a17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d3410ae5b724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486223c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 00:39:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000810) 00:39:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x80) 00:39:22 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) write$apparmor_current(r1, 0x0, 0x0) 00:39:22 executing program 2: futex(&(0x7f00000000c0), 0x81, 0x0, 0x0, 0x0, 0x0) 00:39:25 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 00:39:25 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x349042, 0x0) 00:39:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 00:39:25 executing program 2: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:39:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) 00:39:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 00:39:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000000) 00:39:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4040084) 00:39:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 00:39:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:39:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc4890) 00:39:28 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000006c0), 0x0, 0x40000000, &(0x7f0000000780)) 00:39:28 executing program 3: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x101040) 00:39:28 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8282, 0x0) write$apparmor_exec(r0, 0x0, 0xffffffffffffff91) 00:39:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:39:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b360a0e42546a9b374194370890e0878fdb1ac6e7049b75b4956c409a472a5b67f3988f7ef31952a981ffe8d178708c523c921b1b4d4b0a169b71d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a07a17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d3410ae5b724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486223c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 00:39:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4010) 00:39:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/147) 00:39:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0xc4) 00:39:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000000) 00:39:29 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 00:39:29 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) 00:39:31 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:31 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) 00:39:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x48040) 00:39:31 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 00:39:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 00:39:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) 00:39:32 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x20402, 0x0) 00:39:32 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 00:39:32 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) io_submit(0x0, 0x0, 0x0) 00:39:32 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:39:32 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x8e}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:32 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) 00:39:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000040)={0x0}}, 0x24048044) 00:39:33 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 00:39:33 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 00:39:33 executing program 3: r0 = socket(0x2, 0x3, 0x80) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) 00:39:33 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 00:39:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:39:34 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 00:39:34 executing program 2: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 00:39:34 executing program 1: readlink(0x0, &(0x7f00000001c0)=""/141, 0x8d) 00:39:34 executing program 0: syz_genetlink_get_family_id$devlink(0x0) 00:39:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x8e}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:35 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 00:39:35 executing program 2: socket$inet6(0xa, 0x3, 0x3ff) 00:39:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) 00:39:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$P9_RSTATFS(r2, 0x0, 0x0) 00:39:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x3dc}}, 0x11) 00:39:36 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x481, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 00:39:36 executing program 3: setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 00:39:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "b6750bd48d736c54", "4af40b823905fb43b488533baeca6ba9", "1e66fab0", "d3c2fe2f5ca3dda7"}, 0x28) 00:39:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:39:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x40) 00:39:36 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x8e}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:36 executing program 1: r0 = socket(0x2, 0x3, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 00:39:36 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x2c4102, 0x0) 00:39:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x804) 00:39:36 executing program 2: r0 = socket(0x2, 0x3, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 00:39:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0xc010) 00:39:37 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:39:37 executing program 1: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) 00:39:37 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) write$cgroup_freezer_state(r1, 0x0, 0x0) 00:39:37 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:39:37 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40680, 0x0) 00:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20040010) 00:39:39 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x60c2850) 00:39:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(r0, r1) getpeername$unix(r2, 0x0, 0x0) 00:39:39 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 00:39:39 executing program 0: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) unlink(&(0x7f0000000040)='./bus\x00') chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:39:39 executing program 4: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) unlink(&(0x7f0000000080)='./bus\x00') lgetxattr(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0) 00:39:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x10) 00:39:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x20001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 00:39:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 00:39:40 executing program 1: pipe2$9p(&(0x7f00000001c0), 0x84000) 00:39:40 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) dup2(r0, r1) 00:39:41 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) io_setup(0x4a45, &(0x7f0000000000)) io_setup(0xf807, 0x0) 00:39:42 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:42 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) 00:39:42 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) 00:39:42 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x81800) 00:39:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 00:39:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x40100) 00:39:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000804) [ 1003.488612][T20752] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 00:39:43 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) 00:39:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @private}, @l2, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='bridge_slave_0\x00'}) 00:39:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x1a, 0x18, 0x171, 0x0}) 00:39:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) 00:39:43 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 00:39:46 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:46 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 00:39:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 00:39:46 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x23, 0x0, 0x11) 00:39:46 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012203) 00:39:46 executing program 3: clock_gettime(0xd86f2141a1cc5064, 0x0) 00:39:46 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1900) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x6, 0x8, 0x3, 0x80, 0x0, 0x0, 0x5d201, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10, 0x200000004, 0x0, 0xa, 0x8, 0x0, 0x807}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5}]}, 0x78}}, 0x20004040) 00:39:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1900) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x6, 0x8, 0x3, 0x80, 0x0, 0x0, 0x5d201, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10, 0x200000004, 0x0, 0xa, 0x8, 0x0, 0x807}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5}]}, 0x78}}, 0x20004040) fcntl$setstatus(r1, 0x4, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x54800, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x0, @local, 'veth0_macvtap\x00'}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=0x31) 00:39:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 00:39:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x4048000) [ 1007.282126][T20804] device geneve2 entered promiscuous mode [ 1007.421635][T20806] device geneve2 entered promiscuous mode 00:39:47 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x3000, 0x0, 0x0) 00:39:49 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:49 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 00:39:49 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:39:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000880), 0x0, 0x10022, 0x0) 00:39:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0xe2) 00:39:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc0) 00:39:50 executing program 2: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 00:39:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x2000090) 00:39:50 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:50 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:50 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) recvfrom$unix(r1, 0x0, 0x0, 0x21, 0x0, 0x0) 00:39:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x10) 00:39:50 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x141000, 0x0) 00:39:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x0, 0x0, 0x0}) 00:39:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) 00:39:50 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 00:39:50 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 00:39:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000022, 0x0) 00:39:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20008080) 00:39:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) 00:39:53 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:53 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:53 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x100) 00:39:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 00:39:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80000001, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 00:39:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) 00:39:53 executing program 4: clock_gettime(0x4, &(0x7f0000000300)) 00:39:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) 00:39:53 executing program 2: uname(&(0x7f0000000000)=""/99) 00:39:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, 0x0) 00:39:54 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40400, 0x0) 00:39:54 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 00:39:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:56 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:56 executing program 2: lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:39:56 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) 00:39:56 executing program 1: personality(0x4000005) 00:39:56 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 00:39:56 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:39:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x40) 00:39:57 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$sock(r0, &(0x7f0000000600), 0x0, 0x80) 00:39:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x1, 0x0) 00:39:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:39:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x481, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 00:39:59 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:39:59 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) 00:39:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000080)) 00:39:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) 00:39:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 00:40:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 00:40:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x24000050) 00:40:00 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) splice(r0, &(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x0, 0xf) 00:40:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) 00:40:00 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1010c2, 0x0) 00:40:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r3 = dup2(r1, r2) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) 00:40:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:03 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:03 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8040, 0x0) 00:40:03 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 00:40:03 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) 00:40:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r3 = dup2(r1, r2) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) 00:40:03 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) 00:40:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:40:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r3 = dup2(r1, r2) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) 00:40:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0xfff) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000080)=""/59, &(0x7f00000000c0)=0x3b) 00:40:03 executing program 1: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0xa83b4dbbd2b02f5d) 00:40:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000004) 00:40:05 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r3 = dup2(r1, r2) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) 00:40:06 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:40:06 executing program 2: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) unlink(&(0x7f0000000040)='./bus\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 00:40:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20080800) 00:40:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:40:06 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r0, r1) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) 00:40:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = dup2(r1, r1) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:40:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) 00:40:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000011c0)) 00:40:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 00:40:08 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 00:40:09 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x303000) 00:40:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x24000000) 00:40:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r0) 00:40:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[], 0x40}}, 0xb171c82d477c8a26) 00:40:09 executing program 1: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) unlink(&(0x7f0000000040)='./bus\x00') llistxattr(&(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) rename(0x0, 0x0) fsync(0xffffffffffffffff) 00:40:09 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:40:09 executing program 2: timer_create(0x2, &(0x7f00000000c0)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) 00:40:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:10 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 00:40:11 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:11 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, 0x0, 0x0) 00:40:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20008814) 00:40:11 executing program 0: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 00:40:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 00:40:12 executing program 0: sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5451, 0x0) 00:40:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x800) 00:40:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f00000000c0)) 00:40:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40) 00:40:12 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:40:13 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RVERSION(r0, 0x0, 0xbf7423a6) 00:40:14 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:14 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) 00:40:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40080) 00:40:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)}) 00:40:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8800) 00:40:15 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) splice(r0, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4) 00:40:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4010) 00:40:15 executing program 1: r0 = inotify_init() r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) 00:40:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0xc0000) 00:40:15 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/180) 00:40:16 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:16 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x800, 0x0) 00:40:18 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:18 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x8) 00:40:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @multicast1}, 0x10) 00:40:18 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x280c0, 0x0) 00:40:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x4000080) 00:40:18 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) 00:40:18 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') syz_emit_ethernet(0x0, 0x0, 0x0) 00:40:18 executing program 0: r0 = socket(0x2, 0x3, 0x80) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 00:40:18 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 00:40:18 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x20102, 0x0) 00:40:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000040) 00:40:21 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:21 executing program 2: pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 00:40:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8800) 00:40:21 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x4b2002, 0x0) 00:40:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'nr0\x00', @ifru_flags}) 00:40:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 00:40:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4028080) 00:40:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x2008c804) 00:40:21 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r0, r1) 00:40:21 executing program 2: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) 00:40:22 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) write$cgroup_freezer_state(r1, 0x0, 0x0) 00:40:24 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 00:40:24 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc000, 0x0) 00:40:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24004040) 00:40:24 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(r0, r1) accept4$unix(r2, 0x0, 0x0, 0x0) 00:40:24 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='user.incfs.size\x00', 0x0, 0x0, 0x0) 00:40:24 executing program 1: clock_nanosleep(0x3, 0x0, 0x0, 0x0) 00:40:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) 00:40:24 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 00:40:24 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:26 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:26 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$sock(r0, 0x0, 0x0, 0x44090) 00:40:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={0x0, 0x49, &(0x7f0000000080)={0x0}}, 0x4004800) 00:40:26 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) write$P9_RSTATu(r1, 0x0, 0x0) 00:40:26 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x109000) 00:40:26 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:26 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0xa00c0, 0x110) 00:40:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) 00:40:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={0x0}}, 0x20044024) 00:40:26 executing program 1: r0 = socket(0x2, 0x3, 0x80) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 00:40:26 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:29 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000040)=@can, 0x80, 0x0}}], 0x1, 0x0) 00:40:29 executing program 0: r0 = socket(0x2, 0x3, 0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 00:40:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff68, &(0x7f0000000200)={0x0}}, 0x4004) 00:40:29 executing program 1: timer_create(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 00:40:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24000090) 00:40:29 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40000) 00:40:29 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 00:40:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x28801) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 00:40:30 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x30}}, 0x8050) 00:40:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20008004) 00:40:32 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) 00:40:32 executing program 4: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) 00:40:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 00:40:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) 00:40:32 executing program 0: syz_open_dev$loop(&(0x7f00000013c0)='/dev/loop#\x00', 0x0, 0x2002) 00:40:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040) 00:40:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:40:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f0000000100), 0xfffffffffffffffc, 0x0) 00:40:33 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x0, "5861da92d9553d"}) 00:40:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:40:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "cca0a8bf9dc1a1ea"}) 00:40:35 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x0) 00:40:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4014) 00:40:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000088) 00:40:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x140) 00:40:36 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 00:40:36 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000240)=""/88) 00:40:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x5411, 0x0) 00:40:36 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 00:40:39 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:39 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[], 0xb2, 0x0) 00:40:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000002c0), 0x4) 00:40:39 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 00:40:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) write$FUSE_STATFS(r1, 0x0, 0x0) 00:40:39 executing program 1: semget(0x0, 0x0, 0xa0) 00:40:39 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r10, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 00:40:39 executing program 1: r0 = inotify_init1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r0}, {r3, 0x4204}], 0x2, 0x0, 0x0, 0x0) 00:40:39 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50}, 0x50) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:40:39 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x2000) [ 1060.002380][T21603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.138785][T21603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1060.153150][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.200146][T21632] bridge1: port 1(macvlan2) entered blocking state [ 1060.207588][T21632] bridge1: port 1(macvlan2) entered disabled state [ 1060.220237][T21632] device macvlan2 entered promiscuous mode 00:40:40 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) [ 1060.381941][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.510044][T21609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1060.521299][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.555562][T21649] bridge2: port 1(macvlan3) entered blocking state [ 1060.562408][T21649] bridge2: port 1(macvlan3) entered disabled state [ 1060.574358][T21649] device macvlan3 entered promiscuous mode 00:40:42 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:42 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a00), 0x8, 0x0) close(r0) close(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TIOCVHANGUP(r0, 0x541b, 0x713000) 00:40:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7f}}], 0x10}, 0x0) 00:40:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r10, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 00:40:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000100000013, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1062.938154][T21709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:42 executing program 2: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) [ 1063.037130][T21709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1063.049453][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:42 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:42 executing program 1: syz_emit_ethernet(0x16, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "281a26", 0x0, 0x2f, 0x0, @private0, @mcast2, {[@dstopts={0x0, 0x0, [], [@ra, @jumbo, @generic, @ra, @hao={0xc9, 0x0, @private2}, @hao={0xc9, 0x0, @empty}, @hao={0xc9, 0x0, @private2}]}, @dstopts={0x0, 0x0, [], [@padn={0x1, 0x0, [0x0]}, @jumbo, @padn={0x1, 0x0, [0x0]}, @hao={0xc9, 0x0, @loopback}]}, @hopopts={0x0, 0x0, [], [@jumbo, @enc_lim, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @enc_lim, @jumbo]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@remote, @mcast2, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @fragment, @srh, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@mcast1, @loopback, @remote]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@remote, @private1, @mcast2, @mcast2, @empty, @mcast2, @empty]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0], "c185c83f7bda272d4f746d2ae811de99099f4f8ea2018584b460d0e1b4da427d1d95a92e303e11c69ae6e212a0e99dfd1c68a010294a0ce7c0f8176d0f7f72061651a506c61e37302bfce237805828981130b5524627ed23ee26213610877836aa26106097921ff32fc749f1bc8b2619de1b26dbbc9b3220019c152c55135e660d1b5504b3c8a5c6fe42c3efe0b63691cad432168dc18f607ec923171d206b87731569984dac9deb6bcb63c804ebb8c1182301710a6976ff"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x0], "7711bc4a0f7e2aff97c7811eca193bb818e7da001a98ff4b4e6fa30445a43989eac64e04a44b18f2957643d7d86e0015c6"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0], "f88f8d936f4baccf86e9db6e953664c97d50653142ddea6b60e094c8d15d4fc7c252b2f506bcb1cafe9039577dcc7777eaa542f1eb68abf70de85d755532f8bb938891c72064f4ef956f8ae7e45bf6"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x44, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x90, 0x3, 0x1, 0x0, 0x3, 0x7f}, 0x2, {0x8, 0xfff, 0x3, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "dbe761d4e8ae574a0ff5c9d576db932dee5d7e726fe3953813e1b607b977"}}}}}}}, 0x0) 00:40:42 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9d3080", 0x0, 0x2b, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, 0x0) [ 1063.160688][T21748] bridge3: port 1(macvlan4) entered blocking state [ 1063.167606][T21748] bridge3: port 1(macvlan4) entered disabled state [ 1063.182150][T21748] device macvlan4 entered promiscuous mode 00:40:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xa) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, &(0x7f0000000100)="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"}, 0x48) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:40:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r10, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 00:40:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) [ 1063.801447][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1063.857661][T21769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1063.921194][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1063.980143][T21808] bridge4: port 1(macvlan5) entered blocking state [ 1063.987111][T21808] bridge4: port 1(macvlan5) entered disabled state [ 1063.998652][T21808] device macvlan5 entered promiscuous mode 00:40:45 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 00:40:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x0) 00:40:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r10, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) [ 1066.053422][T21825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:45 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) [ 1066.190061][T21825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1066.202762][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="15", 0x1) [ 1066.303753][T21851] bridge5: port 1(macvlan6) entered blocking state [ 1066.310458][T21851] bridge5: port 1(macvlan6) entered disabled state [ 1066.323381][T21851] device macvlan6 entered promiscuous mode 00:40:46 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:46 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x2c, 0x0, @remote, @mcast1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:40:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 00:40:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) 00:40:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={0x0}}, 0x0) 00:40:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@un=@abs={0x8}, 0x8) 00:40:48 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 00:40:48 executing program 4: openat$fuse(0xffffff9c, &(0x7f0000000fc0)='/dev/fuse\x00', 0x2, 0x0) 00:40:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0}], 0x1, 0x0) 00:40:48 executing program 2: request_key(&(0x7f00000006c0)='cifs.spnego\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)='cifs.idmap\x00', 0x0) 00:40:48 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x3d, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:40:49 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:49 executing program 2: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2) 00:40:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x12040, 0x0, 0x0) 00:40:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:40:49 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002100)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xe75, 0x1, "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"}]}, 0xec4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:40:49 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:40:51 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, 0x0}, 0x0) 00:40:51 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:51 executing program 4: memfd_create(0x0, 0x1a17ea7ac11a7d0e) 00:40:51 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100000000000a0000000000000a340000000e0a000000000000000000000000000008000380040000800900020073797a3100000000090001"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6100000c0c0073bee3080008a6000000000000009846b4a814a45fdc1300030003"], 0x1}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@dev, @dev}, 0xfffffe3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a0031901016000a6b300a4102"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a80, 0x800, 0x0, 0x4b6ae4f95a5de35b) 00:40:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) [ 1072.457846][T21945] validate_nla: 18 callbacks suppressed [ 1072.457888][T21945] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1072.471899][T21945] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1072.480228][T21945] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:40:52 executing program 4: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)) setgid(0x0) 00:40:52 executing program 2: syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x4280) 00:40:52 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000100)='\xab\x0f\xfd\xf7\xbfH\xdc\x86B\xb5)L6\xc8Y\xde\xc4P5\x88\x98\xfe\x908J\xbf\x1c\b\x10\xc1\xae\xc0\x04[\x9aG,Q3`_\x1aF\x12\xe6a\x0e\xd28\xde\xf0Wa\x93\xe2g@\x1c\x9f\x9e{\x01I\xd2\xda\xd1V\xf4\x03\x90f\xcd\x02\xc4<@\x8c\xefS\x14\xc3\x853(XF\x7fQ\xa3?\x9eT\x17\x8d}\xe8\xbd\x0eQ\xd4\bo4\x14\xaa\xfa0l\xcbm:\x1eav\xcd\"\xae\x8f\xd9\xb3\xfc4c\xb3X\xbe:\x87*\xa6\xcd\x02\x8d', 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd600a3ff200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000007"], 0x0) [ 1072.848809][T21957] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 00:40:52 executing program 0: openat$fuse(0xffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) socket(0xa, 0x0, 0xfffffffa) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003100)='NLBL_MGMT\x00') syz_open_procfs(0x0, &(0x7f0000003280)='oom_score\x00') syz_open_procfs(0x0, &(0x7f0000003740)='net/rt_cache\x00') 00:40:52 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00080046"], 0x0) 00:40:55 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:55 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev, @empty, @link_local, @private2}}}}, 0x0) 00:40:55 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000d2864c08110f3210ac170000000109021b0001000000000904000001d1bf400009058deb0e"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x84, 0x1, "97"}, 0x0}) write$char_usb(r1, &(0x7f00000005c0)="3f73acee9f41b89fe1b86791566ecb6d1dfb71f8dd81153ce323a5707d8075aafce08d88e67c413d3f0c9fcd18f89ae000835a089e7fa18832e09ed4747beb9c64554f18d3278c47c10d2cf6d7356032b2", 0x51) 00:40:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:55 executing program 3: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a44f4051090800256f000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1075.747626][T21990] ptrace attach of "/root/syz-executor.3"[21984] was attempted by "/root/syz-executor.3"[21990] 00:40:55 executing program 3: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:55 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090258000101200000090400040302020002052406000005240000000d24070100000100090800000008241c000000000005240100000724140000000009058103000200000409058202200000000009050302", @ANYRESDEC], 0x0) [ 1075.958243][T22002] ptrace attach of "/root/syz-executor.3"[22001] was attempted by "/root/syz-executor.3"[22002] 00:40:55 executing program 3: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1076.025209][ T8501] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1076.037179][ T8517] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1076.056716][ T8503] usb 2-1: new high-speed USB device number 11 using dummy_hcd 00:40:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1076.208937][T22012] ptrace attach of "/root/syz-executor.3"[22011] was attempted by "/root/syz-executor.3"[22012] [ 1076.295770][ T8517] usb 3-1: Using ep0 maxpacket: 16 [ 1076.313485][ T8503] usb 2-1: Using ep0 maxpacket: 8 [ 1076.320282][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1076.395289][ T8501] usb 1-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 1076.404680][ T8501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.416279][ T8517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1076.431180][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1076.440089][T22016] ptrace attach of "/root/syz-executor.3"[22015] was attempted by "/root/syz-executor.3"[22016] [ 1076.440804][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.452556][ T8503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1076.470344][ T8503] usb 2-1: New USB device found, idVendor=0f11, idProduct=1032, bcdDevice=17.ac [ 1076.479579][ T8503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:40:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1076.505057][ T8501] usb 1-1: config 0 descriptor?? [ 1076.603773][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1076.614008][ T8503] usb 2-1: config 0 descriptor?? [ 1076.624787][ T8517] usb 3-1: config 0 descriptor?? [ 1076.670714][ T8517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1076.679455][ T8503] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1076.726598][ T7] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.739043][ T7] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 1076.749530][ T7] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 49 [ 1076.759520][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1076.768312][ T8503] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1076.775602][ T8501] kaweth 1-1:0.0: Firmware present in device. [ 1076.868482][ T8517] usb 3-1: USB disconnect, device number 8 [ 1076.976166][ T8501] kaweth 1-1:0.0: Statistics collection: 0 [ 1076.982234][ T8501] kaweth 1-1:0.0: Multicast filter limit: 0 [ 1076.988422][ T8501] kaweth 1-1:0.0: MTU: 0 [ 1076.993275][ T8501] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1076.995355][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.009549][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.017869][ T7] usb 5-1: Product: syz 00:40:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1077.022200][ T7] usb 5-1: Manufacturer: syz [ 1077.027053][ T7] usb 5-1: SerialNumber: syz [ 1077.148169][T22006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1077.178064][T22006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1077.443720][ T8517] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1077.506704][ T7] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1077.516820][ T7] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1077.574339][ T7] usb 5-1: USB disconnect, device number 6 [ 1077.659337][ T8501] kaweth 1-1:0.0: kaweth interface created at eth1 [ 1077.693500][ T8517] usb 3-1: Using ep0 maxpacket: 32 [ 1077.814103][ T8517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.825398][ T8517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.836857][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1077.846689][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.873336][ T2087] usb 1-1: USB disconnect, device number 49 [ 1077.909994][ T8517] usb 3-1: config 0 descriptor?? [ 1077.962103][ T8517] hub 3-1:0.0: USB hub found [ 1078.128007][T22074] ptrace attach of "/root/syz-executor.3"[22073] was attempted by "/root/syz-executor.3"[22074] [ 1078.165058][ T8517] hub 3-1:0.0: 1 port detected [ 1078.214444][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1078.453542][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1078.593485][ T7] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.604669][ T7] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 1078.614909][ T7] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 49 [ 1078.624905][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1078.643321][ T2087] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1078.804270][ T8517] hub 3-1:0.0: activate --> -90 [ 1078.930965][ T8507] usb 2-1: USB disconnect, device number 11 [ 1078.958408][ T8507] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1079.004862][ T2087] usb 1-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 1079.005640][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1079.014274][ T2087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.023272][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.023327][ T7] usb 5-1: Product: syz [ 1079.023403][ T7] usb 5-1: Manufacturer: syz [ 1079.048610][ T7] usb 5-1: SerialNumber: syz 00:40:58 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:58 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:40:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1079.263569][ T2087] usb 1-1: config 0 descriptor?? [ 1079.303752][ T8517] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1079.310700][ T8517] usb 3-1-port1: connect-debounce failed [ 1079.326315][T22093] ptrace attach of "/root/syz-executor.3"[22092] was attempted by "/root/syz-executor.3"[22093] [ 1079.438340][ T7] usb 5-1: can't set config #1, error -71 [ 1079.467202][ T7] usb 5-1: USB disconnect, device number 7 [ 1079.474652][ T8858] usb 3-1: USB disconnect, device number 9 [ 1079.495381][ T8517] usb 3-1-port1: cannot disable (err = -71) [ 1079.607540][ T2087] usb 1-1: can't set config #0, error -71 [ 1079.619703][ T2087] usb 1-1: USB disconnect, device number 50 [ 1079.823418][ T8507] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1080.023645][ T8858] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1080.073160][ T8507] usb 2-1: Using ep0 maxpacket: 16 [ 1080.194151][ T8507] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1080.207285][ T8507] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1080.217847][ T8507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.265803][ T8858] usb 3-1: Using ep0 maxpacket: 16 [ 1080.279229][ T8507] usb 2-1: config 0 descriptor?? [ 1080.331752][ T8507] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1080.388545][ T8858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1080.402413][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1080.413826][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.483344][ T8858] usb 3-1: config 0 descriptor?? [ 1080.530825][ T8858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1080.538446][ T8505] usb 2-1: USB disconnect, device number 12 [ 1080.727111][ T8503] usb 3-1: USB disconnect, device number 10 00:41:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:00 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090258000101200000090400040302020002052406000005240000000d24070100000100090800000008241c000000000005240100000724140000000009058103000200000409058202200000000009050302", @ANYRESDEC], 0x0) 00:41:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:00 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a44f4051090800256f000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1080.987525][T22151] ptrace attach of "/root/syz-executor.3"[22150] was attempted by "/root/syz-executor.3"[22151] 00:41:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1081.113735][ T8505] usb 2-1: new high-speed USB device number 13 using dummy_hcd 00:41:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1081.175536][T22162] ptrace attach of "/root/syz-executor.3"[22161] was attempted by "/root/syz-executor.3"[22162] [ 1081.294134][ T8507] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1081.333981][ T8858] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1081.356041][ T8505] usb 2-1: Using ep0 maxpacket: 32 [ 1081.413415][ T8503] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1081.483536][ T8505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.494820][ T8505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.504917][ T8505] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1081.515457][ T8505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.539730][ T8505] usb 2-1: config 0 descriptor?? [ 1081.573366][ T8507] usb 5-1: Using ep0 maxpacket: 8 [ 1081.586932][ T8505] hub 2-1:0.0: USB hub found [ 1081.663621][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1081.694853][ T8507] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.706377][ T8507] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 1081.713666][ T8858] usb 1-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 1081.716470][ T8507] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 49 [ 1081.725564][ T8858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.735324][ T8507] usb 5-1: config 1 interface 0 has no altsetting 0 00:41:01 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1081.804415][ T8505] hub 2-1:0.0: 1 port detected [ 1081.823967][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1081.837010][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1081.846275][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.063103][ T8858] usb 1-1: config 0 descriptor?? [ 1082.065580][ T8503] usb 3-1: config 0 descriptor?? [ 1082.167746][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1082.176593][ T8507] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1082.185876][ T8507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.194129][ T8507] usb 5-1: Product: syz [ 1082.198392][ T8507] usb 5-1: Manufacturer: syz [ 1082.203260][ T8507] usb 5-1: SerialNumber: syz [ 1082.333325][ T8858] kaweth 1-1:0.0: Firmware present in device. [ 1082.367299][ T8503] usb 3-1: USB disconnect, device number 11 [ 1082.448064][T22152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1082.473648][ T8505] hub 2-1:0.0: activate --> -90 [ 1082.534021][ T8858] kaweth 1-1:0.0: Statistics collection: 0 [ 1082.540040][ T8858] kaweth 1-1:0.0: Multicast filter limit: 0 [ 1082.546199][ T8858] kaweth 1-1:0.0: MTU: 0 [ 1082.550548][ T8858] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1082.581395][T22152] raw-gadget gadget: fail, usb_ep_enable returned -22 00:41:02 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1082.933240][ T8503] usb 3-1: new high-speed USB device number 12 using dummy_hcd 00:41:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1083.035749][ T8507] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1083.045493][ T8507] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1083.096572][ T8507] usb 5-1: USB disconnect, device number 8 [ 1083.123883][ T8518] usb 2-1: USB disconnect, device number 13 [ 1083.190567][ T8858] kaweth 1-1:0.0: kaweth interface created at eth1 [ 1083.204504][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1083.347955][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.359225][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.369227][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1083.379246][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.435761][ T3720] usb 1-1: USB disconnect, device number 51 [ 1083.471784][ T8503] usb 3-1: config 0 descriptor?? [ 1083.527041][ T8503] hub 3-1:0.0: USB hub found 00:41:03 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1083.749196][ T8503] hub 3-1:0.0: 1 port detected [ 1083.914458][ T8518] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1084.175574][ T8518] usb 2-1: Using ep0 maxpacket: 16 [ 1084.194092][ T8858] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1084.293609][ T8518] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1084.308241][ T8518] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1084.317999][ T8518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.335534][ T8518] usb 2-1: config 0 descriptor?? [ 1084.390979][ T8518] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1084.443726][ T8503] hub 3-1:0.0: activate --> -90 [ 1084.563758][ T8858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.575470][ T8858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.585572][ T8858] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1084.594879][ T8858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:04 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "14ccb8", 0x0, 0x0, 0x0, @dev, @private0}}}}, 0x0) [ 1084.823765][ T8517] usb 2-1: USB disconnect, device number 14 [ 1084.879420][ T3720] usb 3-1: USB disconnect, device number 12 [ 1084.930304][ T8858] usb 5-1: config 0 descriptor?? [ 1085.407856][ T8858] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 1085.451181][ T8858] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input12 00:41:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x256, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0ea0b", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af0402"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) 00:41:05 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2, 0x3, 0x67) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0x0, 0x1d8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7}, 0x7) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) [ 1085.568482][ T8858] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1085.654749][ T8858] usb 5-1: USB disconnect, device number 9 [ 1085.678745][T22276] x_tables: duplicate underflow at hook 2 [ 1085.691955][T22277] IPv6: addrconf: prefix option has invalid lifetime 00:41:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x256, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0ea0b", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af0402"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) [ 1086.034148][ T8503] usb 3-1: new high-speed USB device number 13 using dummy_hcd 00:41:05 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1086.231100][T22302] IPv6: addrconf: prefix option has invalid lifetime [ 1086.293363][ T8503] usb 3-1: Using ep0 maxpacket: 16 00:41:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x256, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0ea0b", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af0402"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) [ 1086.414567][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1086.427676][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1086.434335][ T8858] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1086.437133][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 1086.610101][T22308] IPv6: addrconf: prefix option has invalid lifetime [ 1086.616029][ T8503] usb 3-1: config 0 descriptor?? [ 1086.664253][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x256, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0ea0b", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af0402"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) [ 1086.835157][ T8858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.846456][ T8858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.856646][ T8858] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1086.869942][ T8858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.896197][ T8518] usb 3-1: USB disconnect, device number 13 00:41:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1087.058704][ T8858] usb 5-1: config 0 descriptor?? [ 1087.107688][T22322] IPv6: addrconf: prefix option has invalid lifetime 00:41:06 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x1, 0x3, 0x2, 0x5}, &(0x7f0000000080)) sched_getscheduler(0x0) socket(0x0, 0x1, 0x7ff) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0xf000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) uselib(&(0x7f0000000000)='./file0\x00') bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24048800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0xfdb9) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) 00:41:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1087.323385][ T8858] usb 5-1: can't set config #0, error -71 [ 1087.340563][ T8858] usb 5-1: USB disconnect, device number 10 00:41:07 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) getpgrp(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 1087.503764][ T8518] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1087.516499][T22334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1087.765276][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 1087.874086][ T8503] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1087.905481][ T8518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.916855][ T8518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.927041][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1087.936411][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.997658][ T8518] usb 3-1: config 0 descriptor?? [ 1088.035754][ T8518] hub 3-1:0.0: USB hub found [ 1088.264002][ T8518] hub 3-1:0.0: 1 port detected [ 1088.292145][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.305054][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.315255][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1088.324495][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.417192][ T8503] usb 5-1: config 0 descriptor?? [ 1088.915625][ T8518] hub 3-1:0.0: activate --> -90 [ 1088.922673][ T8503] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 1088.958854][ T8503] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input13 [ 1089.058112][ T8503] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1089.157540][ T8503] usb 5-1: USB disconnect, device number 11 [ 1089.369308][ T8858] usb 3-1: USB disconnect, device number 14 00:41:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:09 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x7f}, 0x0) 00:41:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:09 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f00000007c0)) 00:41:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1090.313342][ T8503] usb 5-1: new high-speed USB device number 12 using dummy_hcd 00:41:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 00:41:10 executing program 1: getgroups(0x1, &(0x7f0000000000)=[0xee01]) [ 1090.473547][ T8518] usb 3-1: new high-speed USB device number 15 using dummy_hcd 00:41:10 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, 0xfffffffffffffffd) [ 1090.728847][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.740422][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.750788][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1090.762052][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.771877][ T8518] usb 3-1: Using ep0 maxpacket: 16 [ 1090.858227][ T8503] usb 5-1: config 0 descriptor?? 00:41:10 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)={0x0, 0xea60}) [ 1090.904882][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1090.917959][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1090.927481][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.048667][ T8518] usb 3-1: config 0 descriptor?? [ 1091.104009][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:10 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x490b01) [ 1091.317864][ T8518] usb 3-1: USB disconnect, device number 15 [ 1091.345610][ T8503] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 1091.376677][ T8503] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input14 00:41:11 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4082, 0x0) [ 1091.502121][ T8503] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1091.594606][ T8858] usb 5-1: USB disconnect, device number 12 [ 1091.943256][ T8518] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1092.203530][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 1092.333641][ T8518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.344721][ T8518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.354930][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1092.364301][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.381700][ T8518] usb 3-1: config 0 descriptor?? [ 1092.425406][ T8518] hub 3-1:0.0: USB hub found [ 1092.671935][ T8518] hub 3-1:0.0: 1 port detected [ 1093.323576][ T8518] hub 3-1:0.0: activate --> -90 [ 1093.739662][ T3720] usb 3-1: USB disconnect, device number 16 00:41:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) 00:41:14 executing program 1: pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000400)={0x8}, &(0x7f0000000440), &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) 00:41:14 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) 00:41:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:14 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x102}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:14 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:14 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x200030, 0xffffffffffffffff, 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9b5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:41:14 executing program 0: rt_sigprocmask(0x2, &(0x7f0000001740)={[0x1]}, 0x0, 0x8) [ 1094.975674][ T8502] usb 5-1: new high-speed USB device number 13 using dummy_hcd 00:41:14 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1095.144581][ T3720] usb 3-1: new high-speed USB device number 17 using dummy_hcd 00:41:14 executing program 0: io_uring_setup(0x230d, &(0x7f0000001140)={0x0, 0x0, 0x10}) syz_genetlink_get_family_id$batadv(&(0x7f0000001480)='batadv\x00') [ 1095.345226][ T8502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.356681][ T8502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.368673][ T8502] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1095.378463][ T8502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.398844][ T3720] usb 3-1: Using ep0 maxpacket: 16 [ 1095.523706][ T8502] usb 5-1: config 0 descriptor?? [ 1095.534248][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1095.547418][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1095.556811][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:15 executing program 1: pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), 0x0, &(0x7f0000000440), 0x0) [ 1095.667708][ T3720] usb 3-1: config 0 descriptor?? 00:41:15 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x977f97399d7aa986, 0x0) [ 1095.728756][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1095.926069][ T3720] usb 3-1: USB disconnect, device number 17 [ 1096.001800][ T8502] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 1096.065370][ T8502] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input15 [ 1096.170996][ T8502] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1096.225218][ T8502] usb 5-1: USB disconnect, device number 13 [ 1096.513345][ T3720] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1096.783459][ T3720] usb 3-1: Using ep0 maxpacket: 32 [ 1096.923442][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.934659][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.944800][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1096.954030][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.017297][ T3720] usb 3-1: config 0 descriptor?? [ 1097.061158][ T3720] hub 3-1:0.0: USB hub found [ 1097.263812][ T3720] hub 3-1:0.0: 1 port detected [ 1097.934326][ T3720] hub 3-1:0.0: activate --> -90 [ 1098.137741][ T8503] usb 3-1: USB disconnect, device number 18 [ 1098.153741][ T3720] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 00:41:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) 00:41:18 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000001480)='batadv\x00') 00:41:18 executing program 0: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1505d36a11985f14) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 00:41:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/220) 00:41:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x102}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:18 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1099.613275][ T3720] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1099.763461][ T8503] usb 3-1: new high-speed USB device number 19 using dummy_hcd 00:41:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x24}}, 0x0) 00:41:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x102}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:19 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0xffffffff80000001]}, 0x8}) [ 1099.984682][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.995922][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.008402][ T3720] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1100.018376][ T3720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.034755][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1100.174412][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1100.188707][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1100.198215][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.332767][ T3720] usb 5-1: config 0 descriptor?? [ 1100.438550][ T8503] usb 3-1: config 0 descriptor?? [ 1100.499207][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)) 00:41:20 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/82, 0x52}}, 0x120) [ 1100.708191][ T8503] usb 3-1: USB disconnect, device number 19 [ 1100.828600][ T3720] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1100.887698][ T3720] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input16 [ 1101.007579][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.015421][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.023198][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.030829][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.038559][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.046252][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.055528][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.064148][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.071784][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.079497][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.087196][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.094895][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.104637][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.112260][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.120001][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.127774][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.135513][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.143223][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.150863][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.158587][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.166338][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.174152][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.181782][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.189512][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.197257][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.204993][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.212616][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.220418][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.228147][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.235889][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.243636][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.251261][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.259014][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.266752][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.274501][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.282136][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.289890][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.297641][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.305370][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.313104][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.320713][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.328466][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.336197][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.343936][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.351558][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.359284][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.367008][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.374728][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.382350][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.390118][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.397856][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.405627][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.413360][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.420985][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.428750][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.436500][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.445391][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.453105][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.460738][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.468439][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.476138][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.483848][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.493234][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.500875][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.508623][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.516382][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.524115][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.531839][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.539568][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.547308][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.555011][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.562636][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.570339][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.578036][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.585743][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.593459][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.601102][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.608833][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.616562][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.624261][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.631898][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1101.639587][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:41:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1101.688809][ T3720] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1101.727592][ T3720] usb 5-1: USB disconnect, device number 14 [ 1101.762536][ T7] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1101.953414][ T8503] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1102.223833][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1102.347762][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.358898][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.368880][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1102.378086][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) 00:41:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/220) 00:41:22 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x114442, 0x0) 00:41:22 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:22 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x41) [ 1102.552344][ T8503] usb 3-1: config 0 descriptor?? [ 1102.588736][ T8503] usb 3-1: can't set config #0, error -71 [ 1102.625475][ T8503] usb 3-1: USB disconnect, device number 20 00:41:22 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xd2}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x83, 0x0, 0x0) [ 1102.975039][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1103.247163][ T8503] usb 3-1: new high-speed USB device number 21 using dummy_hcd 00:41:23 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0xee}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) [ 1103.366538][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.377820][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.387971][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1103.397273][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:23 executing program 1: syz_io_uring_setup(0x5510, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS, 0x40000) [ 1103.523424][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1103.534527][ T7] usb 5-1: config 0 descriptor?? [ 1103.654131][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1103.668722][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1103.678638][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:23 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000015680)=@bpf_lsm={0x19, 0x2, &(0x7f0000000140)=@raw=[@initr0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1103.831842][ T8503] usb 3-1: config 0 descriptor?? [ 1103.882195][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:23 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x210680, 0x0) [ 1104.023700][ T7] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 1104.039501][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input17 [ 1104.088770][ T8503] usb 3-1: USB disconnect, device number 21 [ 1104.170951][ T7] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1104.271865][ T7] usb 5-1: USB disconnect, device number 15 [ 1104.684709][ T8503] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1104.954209][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1105.105043][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.116257][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.126668][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1105.138193][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.232509][ T8503] usb 3-1: config 0 descriptor?? [ 1105.276144][ T8503] hub 3-1:0.0: USB hub found [ 1105.493668][ T8503] hub 3-1:0.0: 1 port detected [ 1106.156979][ T8503] hub 3-1:0.0: activate --> -90 [ 1106.359925][ T8507] usb 3-1: USB disconnect, device number 22 [ 1106.376991][ T8503] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 00:41:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:26 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x2082) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 00:41:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/220) 00:41:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 00:41:26 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xd2}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:26 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0xee}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x8) 00:41:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 1107.413138][ T3720] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1107.504210][ T8517] usb 3-1: new high-speed USB device number 23 using dummy_hcd 00:41:27 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) setuid(0xee00) 00:41:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) [ 1107.746731][ T8517] usb 3-1: Using ep0 maxpacket: 16 [ 1107.804691][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.815803][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.825870][ T3720] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1107.835361][ T3720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x3, &(0x7f0000000140), 0x8) [ 1107.884253][ T8517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1107.897361][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1107.906669][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.920839][ T3720] usb 5-1: config 0 descriptor?? 00:41:27 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000015680)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1108.014498][ T8517] usb 3-1: config 0 descriptor?? [ 1108.066110][ T8517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1108.262286][ T8858] usb 3-1: USB disconnect, device number 23 [ 1108.428517][ T3720] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 1108.497505][ T3720] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input18 [ 1108.600132][ T3720] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1108.665026][ T3720] usb 5-1: USB disconnect, device number 16 [ 1108.833251][ T8858] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1109.073923][ T8858] usb 3-1: Using ep0 maxpacket: 32 [ 1109.194488][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.206056][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.216327][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1109.225656][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.393211][ T8858] usb 3-1: config 0 descriptor?? [ 1109.435234][ T8858] hub 3-1:0.0: USB hub found [ 1109.653659][ T8858] hub 3-1:0.0: 1 port detected [ 1110.531583][ T3720] usb 3-1: USB disconnect, device number 24 00:41:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 00:41:30 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f00000002c0)) 00:41:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:30 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xd2}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:30 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0xee}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x3, &(0x7f0000000140), 0x8) syz_open_dev$mouse(0x0, 0x0, 0x0) pipe(0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) 00:41:31 executing program 1: syz_io_uring_setup(0x34c4, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 1111.679013][ T8517] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1111.804027][ T8858] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1111.909642][T22881] sctp: [Deprecated]: syz-executor.0 (pid 22881) Use of int in max_burst socket option deprecated. [ 1111.909642][T22881] Use struct sctp_assoc_value instead [ 1112.044492][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.057862][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.068233][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1112.077533][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.086931][ T8858] usb 3-1: Using ep0 maxpacket: 16 [ 1112.117507][T22881] sctp: [Deprecated]: syz-executor.0 (pid 22881) Use of int in max_burst socket option deprecated. [ 1112.117507][T22881] Use struct sctp_assoc_value instead 00:41:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140), 0x8) [ 1112.215105][ T8858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1112.228418][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1112.237890][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.354553][ T8517] usb 5-1: config 0 descriptor?? [ 1112.384497][ T8858] usb 3-1: config 0 descriptor?? 00:41:32 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x181b01, 0x0) [ 1112.440452][ T8858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:32 executing program 1: socket$inet_sctp(0x2, 0xf, 0x84) [ 1112.629706][ T8858] usb 3-1: USB disconnect, device number 25 [ 1112.883292][ T8517] usbhid 5-1:0.0: can't add hid device: -71 [ 1112.889731][ T8517] usbhid: probe of 5-1:0.0 failed with error -71 [ 1112.918831][ T8517] usb 5-1: USB disconnect, device number 17 00:41:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x84) [ 1113.203498][ T8858] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1113.453843][ T8858] usb 3-1: Using ep0 maxpacket: 32 [ 1113.574274][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.585380][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.598398][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1113.607641][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.628952][ T8858] usb 3-1: config 0 descriptor?? [ 1113.676659][ T8858] hub 3-1:0.0: USB hub found [ 1113.893723][ T8858] hub 3-1:0.0: 1 port detected [ 1114.760209][ T2087] usb 3-1: USB disconnect, device number 26 00:41:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x65, 0x0, 0x0) 00:41:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0xb, &(0x7f0000000140), 0x8) 00:41:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x40, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x40) 00:41:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}}}, 0x84) [ 1115.836861][ T2087] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1115.916752][ T8858] usb 3-1: new high-speed USB device number 27 using dummy_hcd 00:41:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x23, 0x0, 0x0) 00:41:35 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000015680)=@bpf_lsm={0x3, 0x2, &(0x7f0000000140)=@raw=[@initr0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1116.167043][ T8858] usb 3-1: Using ep0 maxpacket: 16 [ 1116.206812][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.218096][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.228258][ T2087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1116.237580][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.323798][ T8858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1116.337903][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1116.347201][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.393409][ T2087] usb 5-1: config 0 descriptor?? 00:41:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x41) 00:41:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 1116.505252][ T8858] usb 3-1: config 0 descriptor?? [ 1116.550668][ T8858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1116.747748][ T8858] usb 3-1: USB disconnect, device number 27 [ 1116.934664][ T2087] usbhid 5-1:0.0: can't add hid device: -71 [ 1116.941016][ T2087] usbhid: probe of 5-1:0.0 failed with error -71 [ 1116.991117][ T2087] usb 5-1: USB disconnect, device number 18 [ 1117.353296][ T8858] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1117.593401][ T8858] usb 3-1: Using ep0 maxpacket: 32 [ 1117.714618][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.725746][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.735748][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1117.745070][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.805158][ T8858] usb 3-1: config 0 descriptor?? [ 1117.845644][ T8858] hub 3-1:0.0: USB hub found [ 1118.063642][ T8858] hub 3-1:0.0: 1 port detected 00:41:38 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:38 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x4a03, 0x0) 00:41:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 00:41:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:38 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1118.955791][ T8503] usb 3-1: USB disconnect, device number 28 [ 1119.046905][ T2087] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1119.413519][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.424781][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.438589][ T2087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1119.448195][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:39 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1c, &(0x7f0000015680)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:41:39 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x17, 0x0, 0x0) 00:41:39 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1119.525538][ T2087] usb 5-1: config 0 descriptor?? 00:41:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x6b, 0x0, 0x0) 00:41:39 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) [ 1120.053318][ T2087] usbhid 5-1:0.0: can't add hid device: -71 [ 1120.059715][ T2087] usbhid: probe of 5-1:0.0 failed with error -71 [ 1120.083836][ T8503] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1120.100120][ T2087] usb 5-1: USB disconnect, device number 19 00:41:39 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x7, 0xf35ba077ff9a5f7a) 00:41:39 executing program 1: r0 = gettid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:41:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f00000004c0)=0xe4) [ 1120.356793][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1120.477468][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1120.490518][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1120.499925][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) [ 1120.678898][ T8503] usb 3-1: config 0 descriptor?? 00:41:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1120.749701][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1120.928732][ T3720] usb 3-1: USB disconnect, device number 29 [ 1121.274602][ T8507] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1121.537674][ T3720] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1121.654526][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.666235][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.676313][ T8507] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1121.686843][ T8507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.834276][ T3720] usb 3-1: Using ep0 maxpacket: 32 00:41:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x2082) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8}, 0x10) [ 1121.959665][ T8507] usb 5-1: config 0 descriptor?? [ 1121.966328][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.977553][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.987665][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1121.998055][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.205311][ T3720] usb 3-1: config 0 descriptor?? [ 1122.266218][ T3720] hub 3-1:0.0: USB hub found [ 1122.449555][ T8507] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 1122.493385][ T3720] hub 3-1:0.0: 1 port detected [ 1122.512351][ T8507] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input19 [ 1122.622730][ T8507] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1122.697123][ T8507] usb 5-1: USB disconnect, device number 20 [ 1123.337152][ T8503] usb 3-1: USB disconnect, device number 30 00:41:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:43 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000015680)=@bpf_lsm={0x1e, 0x2, &(0x7f0000000140)=@raw=[@initr0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:41:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) 00:41:43 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:43 executing program 0: syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x5, 0x4e000) 00:41:43 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f0000015680)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1124.234389][ T8507] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1124.383968][ T3720] usb 3-1: new high-speed USB device number 31 using dummy_hcd 00:41:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x6e, 0x0, 0x0) 00:41:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x23, &(0x7f0000000140), 0x8) [ 1124.626817][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.637992][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.652603][ T8507] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1124.662160][ T8507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.674076][ T3720] usb 3-1: Using ep0 maxpacket: 16 00:41:44 executing program 0: io_uring_setup(0x3ec2, &(0x7f0000000640)={0x0, 0x0, 0x30}) [ 1124.794748][ T8507] usb 5-1: config 0 descriptor?? [ 1124.807907][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1124.822103][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1124.831440][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:44 executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b707030000009e4ef086dd", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1124.955113][ T3720] usb 3-1: config 0 descriptor?? [ 1125.007724][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1125.198808][ T8858] usb 3-1: USB disconnect, device number 31 [ 1125.275591][ T8507] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 1125.313405][ T8507] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input20 [ 1125.408109][ T8507] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1125.495012][ T8507] usb 5-1: USB disconnect, device number 21 [ 1125.803455][ T8858] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1126.054182][ T8858] usb 3-1: Using ep0 maxpacket: 32 [ 1126.174263][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.185790][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.195854][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1126.205080][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.296792][ T8858] usb 3-1: config 0 descriptor?? [ 1126.339590][ T8858] hub 3-1:0.0: USB hub found [ 1126.543931][ T8858] hub 3-1:0.0: 1 port detected [ 1127.408611][ T8517] usb 3-1: USB disconnect, device number 32 00:41:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4088, 0xff8}], 0x1, 0x0, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 00:41:47 executing program 1: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0xffffffffffffffe0}, 0x28) 00:41:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:47 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4088, 0xff8}], 0x1, 0x0, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 00:41:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x14) [ 1128.304861][ T2087] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1128.517047][ T3720] usb 3-1: new high-speed USB device number 33 using dummy_hcd 00:41:48 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0xc, @sliced}}) [ 1128.667769][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.679194][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.689249][ T2087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1128.698528][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.802781][ T2087] usb 5-1: config 0 descriptor?? [ 1128.813452][ T3720] usb 3-1: Using ep0 maxpacket: 16 00:41:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000280)) [ 1128.955320][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1128.968548][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1128.977878][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:41:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000c00, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 1129.091920][ T3720] usb 3-1: config 0 descriptor?? [ 1129.148617][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1129.296099][ T2087] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 1129.360975][ T2087] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input21 [ 1129.377022][ T3720] usb 3-1: USB disconnect, device number 33 00:41:49 executing program 0: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 1129.612446][ T2087] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1129.640383][ T2087] usb 5-1: USB disconnect, device number 22 [ 1129.954231][ T3720] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1130.193313][ T3720] usb 3-1: Using ep0 maxpacket: 32 [ 1130.314130][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.325278][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.335436][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1130.347695][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.360515][ T3720] usb 3-1: config 0 descriptor?? [ 1130.415212][ T3720] hub 3-1:0.0: USB hub found [ 1130.647258][ T3720] hub 3-1:0.0: 1 port detected [ 1131.476020][ T7] usb 3-1: USB disconnect, device number 34 00:41:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008ae88, &(0x7f0000001a40)={"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"}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1b52, 0x0) 00:41:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:51 executing program 1: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:41:51 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:51 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:51 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000001900)='SMC_PNETID\x00') ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x9c, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xbea2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5ffb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xfffff9dc}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x66d448c2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xa8e}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2}, 0x8080) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001bc0)={'ip6erspan0\x00', &(0x7f0000001b00)=@ethtool_rx_ntuple={0x35, {0x5, @esp_ip4_spec={@multicast1, @dev={0xac, 0x14, 0x14, 0x43}, 0x2, 0x5}, @ah_ip4_spec={@rand_addr=0x64010102, @multicast2, 0x2, 0x4}, 0xd2, 0xfffc, 0x7, 0x9, 0xfffffffffffffffe}}}) [ 1132.393460][ T2087] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1132.533262][ T8507] usb 3-1: new high-speed USB device number 35 using dummy_hcd 00:41:52 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="d0", 0x1}, {&(0x7f0000000100)="da", 0x1}], 0x2}, 0x0) [ 1132.753987][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.765206][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.775359][ T2087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1132.784745][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.793544][ T8507] usb 3-1: Using ep0 maxpacket: 16 00:41:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0101282, 0xffffffffffffffff) [ 1132.913836][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1132.929037][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1132.930852][ T2087] usb 5-1: config 0 descriptor?? [ 1132.938310][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.085050][ T8507] usb 3-1: config 0 descriptor?? [ 1133.130044][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0101282, 0xffffffffffffffff) [ 1133.333633][ T8858] usb 3-1: USB disconnect, device number 35 [ 1133.493633][ T2087] usbhid 5-1:0.0: can't add hid device: -71 [ 1133.500075][ T2087] usbhid: probe of 5-1:0.0 failed with error -71 [ 1133.550160][ T2087] usb 5-1: USB disconnect, device number 23 00:41:53 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) [ 1133.933332][ T8858] usb 3-1: new high-speed USB device number 36 using dummy_hcd 00:41:53 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0x0, 0x3, 0xffffffffffffffff, 0x0) [ 1134.176855][ T8858] usb 3-1: Using ep0 maxpacket: 32 [ 1134.294885][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.306143][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.316253][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1134.325572][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.343424][ T8858] usb 3-1: config 0 descriptor?? [ 1134.389574][ T8858] hub 3-1:0.0: USB hub found [ 1134.593706][ T8858] hub 3-1:0.0: 1 port detected [ 1135.281032][ T7] usb 3-1: USB disconnect, device number 36 [ 1135.283819][ T8858] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 00:41:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) 00:41:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041285, r1) 00:41:55 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:55 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 00:41:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070c9, 0xffffffffffffffff) [ 1136.217212][T23471] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1136.273295][T22103] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1136.297989][ T8858] usb 3-1: new high-speed USB device number 37 using dummy_hcd 00:41:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 00:41:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1136.543180][ T8858] usb 3-1: Using ep0 maxpacket: 16 [ 1136.647532][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.658968][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.672437][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1136.681753][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.693863][ T8858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1136.707076][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1136.716528][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.736724][ T8858] usb 3-1: config 0 descriptor?? [ 1136.745522][T22103] usb 5-1: config 0 descriptor?? [ 1136.781790][ T8858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:41:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041284, r1) 00:41:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '['}]}}, &(0x7f0000000180)=""/211, 0x2a, 0xd3, 0x1}, 0x20) [ 1137.002585][ T8858] usb 3-1: USB disconnect, device number 37 [ 1137.284575][T22103] usbhid 5-1:0.0: can't add hid device: -71 [ 1137.290865][T22103] usbhid: probe of 5-1:0.0 failed with error -71 [ 1137.339842][T22103] usb 5-1: USB disconnect, device number 24 [ 1137.593904][ T8858] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1137.833832][ T8858] usb 3-1: Using ep0 maxpacket: 32 [ 1137.954094][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.967202][ T8858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.977596][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1137.987758][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.009885][ T8858] usb 3-1: config 0 descriptor?? [ 1138.058539][ T8858] hub 3-1:0.0: USB hub found [ 1138.263498][ T8858] hub 3-1:0.0: 1 port detected [ 1138.952584][ T8503] usb 3-1: USB disconnect, device number 38 [ 1138.953489][T22103] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 00:41:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:41:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20002004}) 00:41:59 executing program 0: io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:41:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:41:59 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:41:59 executing program 0: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40080) 00:41:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1139.926661][ T8507] usb 5-1: new high-speed USB device number 25 using dummy_hcd 00:41:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc8c4a53014ba1a7f) [ 1140.063320][T22103] usb 3-1: new high-speed USB device number 39 using dummy_hcd 00:41:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2501000000000000000c"], 0x28}}, 0x0) [ 1140.303416][T22103] usb 3-1: Using ep0 maxpacket: 16 [ 1140.324486][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.335630][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.345710][ T8507] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1140.355042][ T8507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:42:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x2, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1140.399789][ T8507] usb 5-1: config 0 descriptor?? [ 1140.424783][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1140.438161][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1140.449957][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:42:00 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1140.576957][T22103] usb 3-1: config 0 descriptor?? [ 1140.620338][T22103] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1140.818759][T22103] usb 3-1: USB disconnect, device number 39 [ 1140.943694][ T8507] usbhid 5-1:0.0: can't add hid device: -71 [ 1140.950053][ T8507] usbhid: probe of 5-1:0.0 failed with error -71 [ 1140.991399][ T8507] usb 5-1: USB disconnect, device number 25 [ 1141.415678][T22103] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1141.663212][T22103] usb 3-1: Using ep0 maxpacket: 32 [ 1141.784184][T22103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.795463][T22103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.805547][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1141.815730][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.832693][T22103] usb 3-1: config 0 descriptor?? [ 1141.876247][T22103] hub 3-1:0.0: USB hub found [ 1142.097312][T22103] hub 3-1:0.0: 1 port detected [ 1142.783996][ T8517] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1142.791841][T22103] usb 3-1: USB disconnect, device number 40 [ 1142.824041][ T8517] usb 3-1: Failed to suspend device, error -19 00:42:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) 00:42:02 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/220) 00:42:02 executing program 1: syz_open_procfs$namespace(0x0, 0x0) setgid(0x0) 00:42:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:02 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x10a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:03 executing program 0: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 00:42:03 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000c00)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1143.783337][ T8858] usb 3-1: new high-speed USB device number 41 using dummy_hcd 00:42:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x31, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}]}]}, 0x34}}, 0x0) 00:42:03 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x9}, 0x9) [ 1144.023438][ T8858] usb 3-1: Using ep0 maxpacket: 16 00:42:03 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/220) [ 1144.145846][ T8858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1144.159043][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1144.168459][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:42:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127a, 0xffffffffffffffff) [ 1144.307788][ T8858] usb 3-1: config 0 descriptor?? [ 1144.365123][ T8858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1144.562669][T22103] usb 3-1: USB disconnect, device number 41 [ 1145.134305][T22103] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1145.376142][T22103] usb 3-1: Using ep0 maxpacket: 32 [ 1145.494491][T22103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.505875][T22103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.516016][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1145.525368][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.681789][T22103] usb 3-1: config 0 descriptor?? [ 1145.725507][T22103] hub 3-1:0.0: USB hub found [ 1146.043387][T22103] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1146.063114][T22103] usbhid 3-1:0.0: can't add hid device: -22 [ 1146.070081][T22103] usbhid: probe of 3-1:0.0 failed with error -22 00:42:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x1, 0x101}, 0x40) 00:42:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cc, 0xffffffffffffffff) 00:42:06 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/220) 00:42:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1147.173683][T22103] usb 3-1: USB disconnect, device number 42 00:42:06 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0x43, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x1, '.'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x43) 00:42:07 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000780)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 00:42:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 00:42:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1147.615792][T22103] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1147.863315][T22103] usb 3-1: Using ep0 maxpacket: 16 [ 1147.984114][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1147.997207][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1148.008366][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.049431][T22103] usb 3-1: config 0 descriptor?? [ 1148.103986][T22103] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1148.301657][T22103] usb 3-1: USB disconnect, device number 43 [ 1148.895485][T22103] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1149.143361][T22103] usb 3-1: Using ep0 maxpacket: 32 [ 1149.264660][T22103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.275886][T22103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.286376][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1149.295697][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.358197][T22103] usb 3-1: config 0 descriptor?? [ 1149.408571][T22103] hub 3-1:0.0: USB hub found [ 1149.698352][T22103] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1149.713689][T22103] usbhid 3-1:0.0: can't add hid device: -22 [ 1149.721845][T22103] usbhid: probe of 3-1:0.0 failed with error -22 00:42:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:10 executing program 0: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x600000000000000, 0x18d240) 00:42:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:10 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 00:42:10 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x82}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1150.813800][ T7] usb 3-1: USB disconnect, device number 44 00:42:10 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:10 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="d0", 0x1}, {&(0x7f0000000100)="da", 0x1}, {&(0x7f0000000140)="04", 0x1}], 0x3}, 0x4000040) 00:42:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x78) [ 1151.268395][ T8507] usb 3-1: new high-speed USB device number 45 using dummy_hcd 00:42:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ac0)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000040, 0x0, 0x0, 0x20000070, 0x20000a8c], 0x0, 0x0, 0x0}, 0xaf4) 00:42:11 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}], 0x10}, 0x0) [ 1151.514155][ T8507] usb 3-1: Using ep0 maxpacket: 16 00:42:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1151.634239][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1151.647570][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1151.656945][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:42:11 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x9}, 0x9) [ 1151.782194][ T8507] usb 3-1: config 0 descriptor?? [ 1151.853727][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1152.034405][ T8507] usb 3-1: USB disconnect, device number 45 [ 1152.623506][ T8507] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1152.863386][ T8507] usb 3-1: Using ep0 maxpacket: 32 [ 1152.983994][ T8507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.995257][ T8507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.005647][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1153.014915][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.038927][ T8507] usb 3-1: config 0 descriptor?? [ 1153.085907][ T8507] hub 3-1:0.0: USB hub found [ 1153.384493][ T8507] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1153.402321][ T8507] usbhid 3-1:0.0: can't add hid device: -22 [ 1153.408807][ T8507] usbhid: probe of 3-1:0.0 failed with error -22 00:42:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:14 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:42:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x0, 0x20002060, 0x0, 0x0) 00:42:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:14 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x82}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:14 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1154.543607][T22898] usb 3-1: USB disconnect, device number 46 00:42:14 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 00:42:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0xffffffffffffffff) 00:42:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0200002400050400000000000000003c02128014"], 0x24c}], 0x1}, 0x0) [ 1154.963936][ T8507] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1155.041641][T23813] netlink: 552 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x6}]}, 0x14}], 0x1}, 0x0) [ 1155.223158][ T8507] usb 3-1: Using ep0 maxpacket: 16 00:42:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 1155.344017][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1155.357206][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1155.367042][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.500033][ T8507] usb 3-1: config 0 descriptor?? [ 1155.553756][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1155.718919][ T8517] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1155.752059][ T8507] usb 3-1: USB disconnect, device number 47 [ 1156.003315][ T8517] usb 5-1: device descriptor read/64, error 18 [ 1156.403541][ T8517] usb 5-1: device descriptor read/64, error 18 00:42:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)={0x4c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x31, 0x0, 0x0, 0x1, [@generic="5683679689da4fd6f7d3bea7d8cb8e702c2e7f80844efb27d298c2bf0a6b12e3cb11be8024a36c00b429437510"]}]}, 0x4c}], 0x1}, 0x0) 00:42:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) [ 1156.683595][ T8517] usb 5-1: new high-speed USB device number 27 using dummy_hcd 00:42:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x5, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "e1"}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x5d}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1156.974688][ T8517] usb 5-1: device descriptor read/64, error 18 [ 1157.043251][T22898] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1157.303226][T22898] usb 3-1: Using ep0 maxpacket: 16 [ 1157.378667][ T8517] usb 5-1: device descriptor read/64, error 18 [ 1157.434226][T22898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1157.447382][T22898] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1157.456739][T22898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.506901][ T8517] usb usb5-port1: attempt power cycle [ 1157.612399][T22898] usb 3-1: config 0 descriptor?? [ 1157.696147][T22898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:42:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x82}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:17 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x105140, 0x0) 00:42:17 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1157.879540][T22898] usb 3-1: USB disconnect, device number 48 00:42:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1158.167335][T23872] ptrace attach of "/root/syz-executor.3"[23868] was attempted by "/root/syz-executor.3"[23872] 00:42:17 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(r1, &(0x7f0000000540)='./file0\x00', 0x0) [ 1158.233687][ T8517] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1158.334618][ T8517] usb 5-1: Invalid ep0 maxpacket: 0 00:42:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "e1"}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x45}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1158.513335][ T8517] usb 5-1: new high-speed USB device number 29 using dummy_hcd 00:42:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "e1"}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x45}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1159.015986][ T8517] usb 5-1: device not accepting address 29, error -71 [ 1159.033327][ T8517] usb usb5-port1: unable to enumerate USB device [ 1159.194273][T22103] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1159.413509][ T8517] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1159.474049][T22103] usb 3-1: Using ep0 maxpacket: 16 [ 1159.611439][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1159.624869][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1159.634179][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.723876][ T8517] usb 5-1: device descriptor read/64, error 18 [ 1159.816305][T22103] usb 3-1: config 0 descriptor?? [ 1159.889471][T22103] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:42:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) [ 1160.087984][ T2087] usb 3-1: USB disconnect, device number 49 [ 1160.143486][ T8517] usb 5-1: device descriptor read/64, error 18 [ 1160.434574][ T8517] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1160.733722][ T8517] usb 5-1: device descriptor read/64, error 18 00:42:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1161.153638][ T8517] usb 5-1: device descriptor read/64, error 18 [ 1161.223305][ T3720] usb 3-1: new high-speed USB device number 50 using dummy_hcd 00:42:20 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1161.273864][ T8517] usb usb5-port1: attempt power cycle 00:42:21 executing program 1: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x2, './file0\x00'}, 0x6e) [ 1161.463327][ T3720] usb 3-1: Using ep0 maxpacket: 16 00:42:21 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1161.586587][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1161.599829][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1161.609284][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.697595][ T3720] usb 3-1: config 0 descriptor?? 00:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000015000196d87fceec62fd68db91"], 0x50}], 0x1}, 0x0) [ 1161.740361][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:42:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:21 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfc000, 0x0) [ 1161.958869][T23912] udc-core: couldn't find an available UDC or it's busy [ 1161.966059][T23912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:42:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "e1"}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x45}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:21 executing program 1: shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffb000/0x2000)=nil) [ 1162.454234][ T8517] usb 5-1: new high-speed USB device number 32 using dummy_hcd 00:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1d, 0x405, 0x0, 0x0, "", [@generic="4a320bc4508cc40100"]}, 0x1c}], 0x1}, 0x0) [ 1162.563402][ T8517] usb 5-1: Invalid ep0 maxpacket: 0 [ 1162.733597][ T8517] usb 5-1: new high-speed USB device number 33 using dummy_hcd 00:42:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180), 0x23, &(0x7f0000000240)={0x0}}, 0x0) [ 1162.858154][ T8517] usb 5-1: Invalid ep0 maxpacket: 0 [ 1162.864124][ T8517] usb usb5-port1: unable to enumerate USB device 00:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 00:42:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1164.012870][ T7] usb 3-1: USB disconnect, device number 50 00:42:24 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:24 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) [ 1164.554259][ T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd 00:42:24 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8993, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) [ 1164.785049][T23974] ptrace attach of "/root/syz-executor.5"[23973] was attempted by "/root/syz-executor.5"[23974] [ 1164.797435][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1164.934119][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1164.947451][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1164.956850][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.098597][ T7] usb 3-1: config 0 descriptor?? 00:42:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:24 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1165.164992][ T7] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1165.352684][T23966] udc-core: couldn't find an available UDC or it's busy [ 1165.360095][T23966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:42:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x5, [@datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "e1"}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x45}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:25 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) [ 1165.603312][ T7] usb 5-1: new high-speed USB device number 34 using dummy_hcd 00:42:25 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, 0x0) 00:42:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) [ 1166.007785][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1166.022906][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1166.032710][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.134513][ T7] usb 5-1: config 0 descriptor?? [ 1166.180830][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:42:25 executing program 1: waitid(0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0) 00:42:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:26 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/null\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 1167.278346][T22898] usb 3-1: USB disconnect, device number 51 00:42:27 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/null\x00', 0x0, 0x0) ioctl$TCGETX(r0, 0x5432, 0x0) [ 1167.893726][T22898] usb 3-1: new high-speed USB device number 52 using dummy_hcd 00:42:27 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:27 executing program 1: getrusage(0x549998ba5b0d0ac8, 0x0) [ 1168.143292][T22898] usb 3-1: Using ep0 maxpacket: 16 [ 1168.263424][T22898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1168.278541][T22898] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1168.291826][T22898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.456845][T22898] usb 3-1: config 0 descriptor?? 00:42:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:28 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x40080, 0x0) [ 1168.501234][T22898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1168.559018][T22103] usb 5-1: USB disconnect, device number 34 [ 1168.700286][T24028] udc-core: couldn't find an available UDC or it's busy [ 1168.707597][T24028] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:42:28 executing program 0: semget$private(0x0, 0x1, 0x20) 00:42:28 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/null\x00', 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, 0x0) [ 1169.073523][T22103] usb 5-1: new high-speed USB device number 35 using dummy_hcd 00:42:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, [0x10001, 0x100, 0xff, 0x5]}) io_setup(0x83, &(0x7f00000003c0)=0x0) shmdt(0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, 0x0}]) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in=@local}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe4) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0xe6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x91c}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 00:42:28 executing program 1: timer_create(0x21, 0x0, 0x0) [ 1169.369550][T24062] device gre1 entered promiscuous mode [ 1169.446678][T22103] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1169.460252][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1169.473533][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.505105][T22103] usb 5-1: config 0 descriptor?? [ 1169.551714][T22103] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1170.071239][T24074] device gre1 entered promiscuous mode 00:42:30 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:30 executing program 1: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x123482) 00:42:30 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$alg(0x26, 0x5, 0x0) ftruncate(r3, 0x208202) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x0, [], [{0x2, 0x7f, 0xfa, 0x1ff, 0x1}, {0x5, 0x9, 0x0, 0x3, 0x0, 0x1}], [[], [], []]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffa) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0) [ 1170.591367][ T3720] usb 3-1: USB disconnect, device number 52 00:42:30 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) [ 1171.297727][T22103] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1171.573377][T22103] usb 3-1: Using ep0 maxpacket: 32 [ 1171.703333][T22103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.713953][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1171.727207][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1171.736505][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.822057][T22103] usb 3-1: config 0 descriptor?? 00:42:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2203, 0x0) 00:42:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040000) [ 1171.869680][T22103] hub 3-1:0.0: bad descriptor, ignoring hub [ 1171.876129][T22103] hub: probe of 3-1:0.0 failed with error -5 [ 1171.896566][ T3720] usb 5-1: USB disconnect, device number 35 00:42:31 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:31 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:42:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x7) 00:42:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) [ 1172.513216][ T3720] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1172.885229][ T3720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1172.898389][ T3720] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1172.907753][ T3720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.965545][ T3720] usb 5-1: config 0 descriptor?? [ 1173.010492][ T3720] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:42:33 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x8844) 00:42:33 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cfS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) prctl$PR_GET_FPEXC(0xb, 0x0) [ 1174.353556][ T3720] usb 3-1: USB disconnect, device number 53 00:42:34 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:34 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) recvfrom(r0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0) [ 1174.973353][T22103] usb 3-1: new high-speed USB device number 54 using dummy_hcd 00:42:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:34 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x10}], 0x10}}], 0x1, 0x0) 00:42:34 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x42001, 0x0) [ 1175.164132][ T8503] usb 5-1: USB disconnect, device number 36 [ 1175.244629][T22103] usb 3-1: Using ep0 maxpacket: 32 [ 1175.389523][T22103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.399957][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.413250][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1175.422407][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.480438][T22103] usb 3-1: config 0 descriptor?? [ 1175.537894][T22103] hub 3-1:0.0: bad descriptor, ignoring hub [ 1175.546573][T22103] hub: probe of 3-1:0.0 failed with error -5 00:42:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:35 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendmsg(r0, 0x0, 0x0) 00:42:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 1175.753173][ T2087] usb 5-1: new high-speed USB device number 37 using dummy_hcd 00:42:35 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000002080)='/dev/urandom\x00', 0x440, 0x0) [ 1176.140538][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.151806][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.163627][ T2087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1176.177500][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.305048][ T2087] usb 5-1: config 0 descriptor?? [ 1176.361735][ T2087] usbhid 5-1:0.0: can't add hid device: -22 [ 1176.370631][ T2087] usbhid: probe of 5-1:0.0 failed with error -22 00:42:37 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:37 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f00000000c0)='./file0\x00'}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 00:42:37 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/179, 0xfffffffffffffc80}, {&(0x7f0000000040)=""/133, 0x85}], 0x2}, 0x0) 00:42:37 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1177.970311][ T3720] usb 3-1: USB disconnect, device number 54 00:42:37 executing program 1: mkdir(&(0x7f0000000900)='./file0\x00', 0x0) mkdir(&(0x7f0000000940)='./file0/file0\x00', 0x0) 00:42:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:38 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:42:38 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r0) [ 1178.485997][ T8503] usb 5-1: USB disconnect, device number 37 [ 1178.558344][ T3720] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1178.813806][ T3720] usb 3-1: Using ep0 maxpacket: 32 00:42:38 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:38 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 00:42:38 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000140)) dup2(r0, r1) [ 1178.933886][ T3720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.944302][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1178.957670][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1178.966992][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.996479][ T3720] usb 3-1: config 0 descriptor?? [ 1179.035451][ T3720] hub 3-1:0.0: bad descriptor, ignoring hub [ 1179.041598][ T3720] hub: probe of 3-1:0.0 failed with error -5 [ 1179.073339][ T8503] usb 5-1: new high-speed USB device number 38 using dummy_hcd 00:42:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0) [ 1179.453510][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.464932][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.474998][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1179.484269][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.531922][ T8503] usb 5-1: config 0 descriptor?? [ 1179.581116][ T8503] usbhid 5-1:0.0: can't add hid device: -22 [ 1179.587603][ T8503] usbhid: probe of 5-1:0.0 failed with error -22 00:42:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:41 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:41 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6, 0xc, 0x0}, 0x0) 00:42:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 00:42:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1181.643897][ T8517] usb 3-1: USB disconnect, device number 55 00:42:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1181.915674][ T3720] usb 5-1: USB disconnect, device number 38 00:42:41 executing program 1: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x45664406d9a) 00:42:41 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x5010, 0xffffffffffffffff, 0x0) [ 1182.363390][ T8503] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1182.443361][ T3720] usb 5-1: new high-speed USB device number 39 using dummy_hcd 00:42:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 1182.604095][ T8503] usb 3-1: Using ep0 maxpacket: 32 00:42:42 executing program 0: getrusage(0x0, &(0x7f0000000640)) [ 1182.724125][ T8503] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.734576][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1182.747876][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1182.757102][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.844769][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.855902][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.866227][ T3720] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1182.875585][ T3720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.025166][ T8503] usb 3-1: config 0 descriptor?? [ 1183.069015][ T8503] hub 3-1:0.0: bad descriptor, ignoring hub [ 1183.075733][ T8503] hub: probe of 3-1:0.0 failed with error -5 [ 1183.127732][ T3720] usb 5-1: config 0 descriptor?? [ 1183.181378][ T3720] usbhid 5-1:0.0: can't add hid device: -22 [ 1183.187986][ T3720] usbhid: probe of 5-1:0.0 failed with error -22 00:42:42 executing program 0: r0 = gettid() ptrace$peeksig(0x4209, r0, 0x0, 0x0) 00:42:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0xd0, 0xd0, 0x190, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "3193"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "197e"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) [ 1183.515050][T24335] x_tables: duplicate underflow at hook 2 [ 1185.155901][ T3720] usb 5-1: USB disconnect, device number 39 00:42:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) 00:42:45 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x80000001) 00:42:45 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:45 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1185.476028][ T8503] usb 3-1: USB disconnect, device number 56 [ 1185.559466][T24368] ptrace attach of "/root/syz-executor.3"[24359] was attempted by "/root/syz-executor.3"[24368] 00:42:45 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x0, 0x9}}) 00:42:45 executing program 1: syz_io_uring_complete(0x0) io_uring_setup(0x449a, &(0x7f0000000580)) [ 1185.853275][ T8503] usb 5-1: new high-speed USB device number 40 using dummy_hcd 00:42:45 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x0, 0x0) 00:42:45 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) [ 1186.183302][ T3720] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1186.213633][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.225028][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.235077][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1186.244375][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.259446][ T8503] usb 5-1: config 0 descriptor?? 00:42:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 1186.466139][ T3720] usb 3-1: Using ep0 maxpacket: 32 [ 1186.584933][ T3720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.595519][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1186.612889][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1186.626825][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.654243][ T3720] usb 3-1: config 0 descriptor?? [ 1186.696854][ T3720] hub 3-1:0.0: bad descriptor, ignoring hub [ 1186.703248][ T3720] hub: probe of 3-1:0.0 failed with error -5 [ 1186.794340][ T8503] usbhid 5-1:0.0: can't add hid device: -71 [ 1186.800631][ T8503] usbhid: probe of 5-1:0.0 failed with error -71 [ 1186.832899][ T8503] usb 5-1: USB disconnect, device number 40 00:42:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:48 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, 0x0, 0x0) 00:42:48 executing program 0: clock_nanosleep(0x7, 0x0, &(0x7f0000000040), 0x0) 00:42:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:48 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:48 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1189.121502][ T2087] usb 3-1: USB disconnect, device number 57 00:42:48 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000140)={0x50, 0x13, 0xbf2f187e5ebbf60f, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x7}]}, 0x50}}, 0x0) [ 1189.503175][ T2087] usb 5-1: new high-speed USB device number 41 using dummy_hcd 00:42:49 executing program 0: syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local, @multicast, @val={@void, {0x8100, 0x7}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @remote}}}}, 0x0) [ 1189.703380][T22103] usb 3-1: new high-speed USB device number 58 using dummy_hcd 00:42:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 1189.887137][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.898370][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.908516][ T2087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1189.918928][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.984953][T22103] usb 3-1: Using ep0 maxpacket: 32 00:42:49 executing program 1: r0 = socket(0x2, 0x1, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) [ 1190.050256][ T2087] usb 5-1: config 0 descriptor?? [ 1190.123626][T22103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.134310][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1190.147442][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1190.156677][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:42:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) [ 1190.267679][T22103] usb 3-1: config 0 descriptor?? [ 1190.328469][T22103] hub 3-1:0.0: bad descriptor, ignoring hub [ 1190.335264][T22103] hub: probe of 3-1:0.0 failed with error -5 00:42:50 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffcd1}, 0x0) [ 1190.625873][ T2087] usbhid 5-1:0.0: can't add hid device: -71 [ 1190.626204][ T2087] usbhid: probe of 5-1:0.0 failed with error -71 [ 1190.640259][ T2087] usb 5-1: USB disconnect, device number 41 00:42:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:52 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9e}, 0x0) 00:42:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, 0x0}, 0x0) 00:42:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:52 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:52 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1192.723633][T22898] usb 3-1: USB disconnect, device number 58 00:42:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040), 0x0, 0x2000c8c1, 0x0, 0x0) 00:42:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e21, @private}, 0x10) 00:42:52 executing program 0: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x1) [ 1193.093152][ T8503] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1193.183171][ T8507] usb 3-1: new high-speed USB device number 59 using dummy_hcd 00:42:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') fcntl$setlease(r0, 0x400, 0x2) [ 1193.454702][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.467067][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.477504][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1193.486770][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.496463][ T8507] usb 3-1: device descriptor read/64, error 18 00:42:53 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) [ 1193.599381][ T8503] usb 5-1: config 0 descriptor?? 00:42:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5414, 0x0) [ 1193.884339][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1194.144235][ T8503] usbhid 5-1:0.0: can't add hid device: -71 [ 1194.150498][ T8503] usbhid: probe of 5-1:0.0 failed with error -71 [ 1194.167282][ T8507] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1194.225473][ T8503] usb 5-1: USB disconnect, device number 42 [ 1194.443563][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1194.833770][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1194.954591][ T8507] usb usb3-port1: attempt power cycle [ 1195.663166][ T8507] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1195.765176][ T8507] usb 3-1: Invalid ep0 maxpacket: 0 [ 1195.923631][ T8507] usb 3-1: new high-speed USB device number 62 using dummy_hcd 00:42:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:42:55 executing program 1: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(r0, &(0x7f0000000140)) 00:42:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:55 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:55 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1196.038907][ T8507] usb 3-1: device descriptor read/8, error -71 00:42:55 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:55 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc02812f8, &(0x7f0000000200)={0x100007}) [ 1196.255263][ T8507] usb 3-1: device descriptor read/8, error -71 [ 1196.373603][ T8507] usb usb3-port1: unable to enumerate USB device [ 1196.404092][ T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd 00:42:56 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:56 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x2000, &(0x7f000029f000/0x2000)=nil}) r4 = getpgid(0x0) perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x1, r2, r3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xbb08, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U-'}, 0x16, 0x3) write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="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"]) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x100007, r5, 0x9, 0x0, 0x3000000, 0xff0f000000000000}) 00:42:56 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x800412f9, &(0x7f0000000200)={0x100007}) [ 1196.724691][ T8507] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1196.764119][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:42:56 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1196.775284][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.785399][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1196.794743][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.878602][ T7] usb 5-1: config 0 descriptor?? [ 1197.033289][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1197.365697][ T7] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 1197.404490][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input22 [ 1197.447706][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1197.530397][ T7] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1197.600855][ T7] usb 5-1: USB disconnect, device number 43 [ 1197.723739][ T8507] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1197.993263][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1198.393212][ T8507] usb 3-1: device descriptor read/64, error 18 [ 1198.513786][ T8507] usb usb3-port1: attempt power cycle [ 1199.235077][ T8507] usb 3-1: new high-speed USB device number 65 using dummy_hcd 00:42:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:42:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:59 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)='C', 0x1) 00:42:59 executing program 0: r0 = openat$nvram(0xffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x82001, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x10}, 0x10) 00:42:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:42:59 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1199.463334][ T8507] usb 3-1: device descriptor read/8, error -71 00:42:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:42:59 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1199.673565][ T8507] usb 3-1: device descriptor read/8, error -71 00:42:59 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:'}, &(0x7f0000000280)={0x0, "5a609559d6ad8e0cc27dd6602d967b89d06dac0514c5c00533086a00395003c1c3d1c414836e0c569d5f468047ab720b8c8eb87ee83b8188fda67fb332dd1459"}, 0x48, 0xfffffffffffffffb) [ 1199.883220][ T8517] usb 5-1: new high-speed USB device number 44 using dummy_hcd 00:42:59 executing program 1: capget(&(0x7f0000000400), 0x0) [ 1200.164352][ T8507] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1200.264295][ T8507] usb 3-1: Invalid ep0 maxpacket: 0 [ 1200.281431][ T8507] usb usb3-port1: unable to enumerate USB device [ 1200.298145][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.309317][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.319490][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1200.330350][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.363150][ T8517] usb 5-1: config 0 descriptor?? 00:43:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/65, 0x41) [ 1200.836067][ T8517] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 1200.853775][ T8517] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input23 [ 1200.955983][ T8517] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1201.070814][ T8517] usb 5-1: USB disconnect, device number 44 00:43:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:02 executing program 1: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, '.\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 00:43:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 00:43:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:02 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) 00:43:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1203.283495][ T3720] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1203.297644][ T2087] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1203.557769][ T2087] usb 3-1: Using ep0 maxpacket: 16 [ 1203.648444][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.659632][ T3720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.669816][ T3720] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1203.680374][ T3720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:03 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xc1) [ 1203.694447][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1203.707574][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1203.716844][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) [ 1203.826373][ T2087] usb 3-1: config 0 descriptor?? [ 1203.874941][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1203.876477][ T3720] usb 5-1: config 0 descriptor?? 00:43:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000000), 0x0, 0x4881, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast, 'bridge_slave_1\x00'}}, 0x80) [ 1204.273431][T24722] udc-core: couldn't find an available UDC or it's busy [ 1204.280523][T24722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1204.356000][ T3720] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1204.392175][ T3720] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input24 [ 1204.538799][ T3720] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 00:43:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x12) [ 1204.639598][ T3720] usb 5-1: USB disconnect, device number 45 00:43:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000000), 0x0, 0x20044090, &(0x7f0000000100)=@ipx={0x4, 0x0, 0x0, "40c66813bc89"}, 0x80) 00:43:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000000)="f9", 0x1, 0x4881, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast, 'bridge_slave_1\x00'}}, 0x80) 00:43:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1206.026446][ T8517] usb 3-1: USB disconnect, device number 67 00:43:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000300), 0x0, 0x60, 0x0) 00:43:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) [ 1206.441844][T22103] usb 5-1: new high-speed USB device number 46 using dummy_hcd 00:43:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1206.563261][ T7] usb 3-1: new high-speed USB device number 68 using dummy_hcd 00:43:06 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) [ 1206.803800][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1206.827134][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.838487][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.848675][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1206.857910][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.924306][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1206.937451][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1206.946843][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.960227][T22103] usb 5-1: config 0 descriptor?? 00:43:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='_', 0x1, 0x10, 0x0, 0x0) [ 1207.031207][ T7] usb 3-1: config 0 descriptor?? [ 1207.080565][ T7] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) [ 1207.457912][T22103] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 1207.479372][T24803] udc-core: couldn't find an available UDC or it's busy [ 1207.486615][T24803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1207.516179][T22103] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input25 00:43:07 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) [ 1207.676444][T22103] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1207.758656][T22103] usb 5-1: USB disconnect, device number 46 00:43:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pwritev(r0, &(0x7f00000015c0)=[{0xfffffffffffffffe}], 0x1, 0x0, 0x0) 00:43:09 executing program 1: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1) 00:43:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1209.475951][ T8517] usb 3-1: USB disconnect, device number 68 00:43:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:09 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8000) 00:43:09 executing program 0: setreuid(0xffffffffffffffff, 0xee00) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x402, 0x0) [ 1210.064075][ T7] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1210.224710][ T8503] usb 3-1: new high-speed USB device number 69 using dummy_hcd 00:43:10 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x40008ed) [ 1210.435643][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.446929][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.457098][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1210.467770][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.523465][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1210.624958][ T7] usb 5-1: config 0 descriptor?? 00:43:10 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) [ 1210.651052][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1210.664405][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1210.674939][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.719098][ T8503] usb 3-1: config 0 descriptor?? [ 1210.772318][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)="94", 0x1, 0x2000c8c1, 0x0, 0xe) 00:43:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) setreuid(0xffffffffffffffff, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) [ 1211.156377][ T7] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 1211.174492][T24886] udc-core: couldn't find an available UDC or it's busy [ 1211.184855][T24886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1211.207512][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input26 [ 1211.300221][ T7] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1211.414886][ T7] usb 5-1: USB disconnect, device number 47 00:43:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:12 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc001, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 00:43:12 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x3000100) 00:43:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x0, 0x1f64, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1212.959412][ T3720] usb 3-1: USB disconnect, device number 69 00:43:12 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:13 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:13 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000070) 00:43:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4080, &(0x7f00000002c0)=@abs, 0x6e) [ 1213.433896][ T7] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1213.583429][ T3720] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1213.795473][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.806819][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.817009][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1213.827391][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:13 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000) 00:43:13 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000024002db1ec9000"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000000c0002"], 0x40}}, 0x0) [ 1213.845545][ T3720] usb 3-1: Using ep0 maxpacket: 16 [ 1213.956329][ T7] usb 5-1: config 0 descriptor?? [ 1213.965397][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1213.980263][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1213.989542][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.043347][ T3720] usb 3-1: config 0 descriptor?? [ 1214.107138][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0xffffffffffffffd8) 00:43:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x80d0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 1214.288506][ T3720] usb 3-1: USB disconnect, device number 70 [ 1214.445618][ T7] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 1214.509038][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0011/input/input27 [ 1214.608455][ T7] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1214.651813][ T8517] usb 5-1: USB disconnect, device number 48 00:43:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:14 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa0000070) 00:43:14 executing program 1: semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000000000)=""/245) 00:43:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1215.593384][ T3720] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1215.783594][ T8503] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1215.833108][ T3720] usb 3-1: Using ep0 maxpacket: 16 [ 1215.954130][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1215.967346][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1215.976762][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.002600][ T3720] usb 3-1: config 0 descriptor?? [ 1216.051236][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1216.170745][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.182045][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.192118][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1216.202605][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.264775][ T8503] usb 5-1: config 0 descriptor?? [ 1216.268383][T22103] usb 3-1: USB disconnect, device number 71 00:43:16 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='b', 0x1, 0x40, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 00:43:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x9}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\b\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 00:43:16 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1216.745623][ T8503] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 1216.790695][ T8503] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input28 00:43:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private2}}}, 0x104) [ 1216.978401][ T8503] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 00:43:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) [ 1217.114396][ T8503] usb 5-1: USB disconnect, device number 49 00:43:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746aec66ba", 0x4d, 0x0, 0x0, 0x0) [ 1217.492745][T25104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1217.509654][T25104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1217.519198][T25104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:43:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}}, 0x0) [ 1217.763852][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1217.781462][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1217.789329][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1217.993729][ T8518] usb 3-1: new high-speed USB device number 72 using dummy_hcd 00:43:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 1218.233370][ T8518] usb 3-1: Using ep0 maxpacket: 16 00:43:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001d000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00001d00140001"], 0x30}}, 0x0) [ 1218.343103][ T8503] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1218.354215][T25115] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1218.366573][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1218.379587][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1218.388834][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.488552][ T8518] usb 3-1: config 0 descriptor?? [ 1218.542897][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1218.562511][T25123] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1218.754592][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.766909][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.777172][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1218.786414][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.799445][ T3720] usb 3-1: USB disconnect, device number 72 [ 1218.880152][ T8503] usb 5-1: config 0 descriptor?? [ 1219.355273][ T8503] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 1219.392444][ T8503] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input29 [ 1219.502771][ T8503] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1219.575893][ T8503] usb 5-1: USB disconnect, device number 50 00:43:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:19 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x860442, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000180)) write$cgroup_int(r2, &(0x7f0000000040), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x6}) 00:43:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001d000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00001d00140001"], 0x30}}, 0x0) 00:43:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:19 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') read$FUSE(r0, 0x0, 0x0) 00:43:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x6, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001d000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00001d00140001"], 0x30}}, 0x0) [ 1220.493740][ T8503] usb 3-1: new high-speed USB device number 73 using dummy_hcd 00:43:20 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x9}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\b\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 00:43:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001d000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00001d00140001"], 0x30}}, 0x0) [ 1220.734722][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1220.773645][ T8517] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1220.854109][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1220.867315][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1220.876644][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xc244000, 0x0, 0x0, 0x0, 0x0) [ 1221.064400][ T8503] usb 3-1: config 0 descriptor?? [ 1221.116091][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1221.174549][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.185913][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.200497][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1221.209844][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.319854][ T8503] usb 3-1: USB disconnect, device number 73 00:43:21 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1221.461608][ T8517] usb 5-1: config 0 descriptor?? [ 1221.936432][ T8517] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1222.052601][ T8517] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input30 [ 1222.398319][ T8517] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1222.509454][ T8517] usb 5-1: USB disconnect, device number 51 00:43:23 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="89", 0xc1c08d2f9a78d682, 0x20005050, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) 00:43:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:23 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1228.936241][T25280] ptrace attach of "/root/syz-executor.5"[25279] was attempted by "/root/syz-executor.5"[25280] 00:43:27 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000180001faffffff00000000000a00000000000000000000000600150002000000140005002001007619dabdd44f680b00000000000c0016"], 0x44}}, 0x0) 00:43:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:27 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1229.049017][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 1229.061288][ C0] clocksource: 'acpi_pm' wd_now: 27938f wd_last: a6bb4c mask: ffffff [ 1229.071685][ C0] clocksource: 'tsc' cs_now: 29555099cf9 cs_last: 2918f2eddc7 mask: ffffffffffffffff [ 1229.084285][ C0] tsc: Marking TSC unstable due to clocksource watchdog 00:43:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) 00:43:29 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1229.421656][ T3720] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 1229.431547][ T3720] sched_clock: Marking unstable (1229478739741, -57123009)<-(1229427489053, -5872152) [ 1229.458604][T25301] clocksource: Switched to clocksource acpi_pm [ 1229.595026][ T8503] usb 3-1: new high-speed USB device number 74 using dummy_hcd 00:43:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002640)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x37, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}]}}}], 0x14}, 0x0) [ 1229.664065][ T8517] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1229.843389][ T8503] usb 3-1: Using ep0 maxpacket: 16 00:43:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002640)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0xffffffdc, 0x0, 0x7, {[@generic={0x0, 0xa, "13a1743587063cc2"}, @rr={0x7, 0x3, 0x0, [@rand_addr, @empty]}]}}}], 0x1c}, 0x0) [ 1229.963376][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1229.976714][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1229.986437][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.011123][ T8503] usb 3-1: config 0 descriptor?? [ 1230.060498][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1230.107563][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.118724][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.130709][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1230.140344][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6a, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}]}, 0x58}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 1230.263006][T22898] usb 3-1: USB disconnect, device number 74 [ 1230.312184][ T8517] usb 5-1: config 0 descriptor?? 00:43:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x10000, &(0x7f0000000080)) io_getevents(0x0, 0x4, 0x0, &(0x7f0000000000), 0x0) [ 1230.801078][ T8517] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 1230.836711][ T8517] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0015/input/input31 [ 1230.856360][T22898] usb 3-1: new high-speed USB device number 75 using dummy_hcd 00:43:30 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1231.028922][ T8517] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1231.053584][ T8517] usb 5-1: USB disconnect, device number 52 [ 1231.143610][T22898] usb 3-1: Using ep0 maxpacket: 16 [ 1231.165311][T25351] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1231.277528][T22898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1231.290569][T22898] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1231.301134][T22898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.369205][T25365] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1231.405116][T22898] usb 3-1: config 0 descriptor?? [ 1231.468209][T22898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:31 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3e) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1231.734536][ T8858] usb 3-1: USB disconnect, device number 75 00:43:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 00:43:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x3ff, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) [ 1232.034257][T25381] ptrace attach of "/root/syz-executor.0"[25378] was attempted by "/root/syz-executor.0"[25381] 00:43:31 executing program 1: socket(0xa, 0x0, 0x400000) [ 1232.363231][ T8858] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1232.393936][ T8503] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1232.613260][ T8858] usb 3-1: Using ep0 maxpacket: 16 00:43:32 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:32 executing program 0: clock_gettime(0x7, &(0x7f00000005c0)) 00:43:32 executing program 1: socketpair(0x11, 0xa, 0x6f, 0x0) [ 1232.754264][ T8858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1232.754608][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.767309][ T8858] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1232.767407][ T8858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.778385][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.778493][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1232.818647][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.969965][ T8858] usb 3-1: config 0 descriptor?? [ 1233.026372][ T8858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7800}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}}, 0x0) 00:43:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) mknod(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000200)='\xd2 \xf4\x01%\x02\x9d\x92\xe4\x8d\x82\xa0\xe2\xf2Fj\xf8/f\x86)\xc2<\xb3\xc3N\xb6p\xf3\xc9\r\x03\xce5\x83$\xe1h\x88n\xe4\x02\xd3\xc4L\x82\xf6)\xe9\xfa\xc3n\xdc\xd4\xc1\x99s,\xfb\xba\x1c\x02a\x85\xc1t\xdd6\x9f7gF\xc4\x16}t\xb0\x93\xfb\x920x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x81}, 0x0, &(0x7f0000000200)={0x0, r0+60000000}, 0x0) [ 1237.023427][ T3720] usbhid 5-1:0.0: can't add hid device: -71 [ 1237.029786][ T3720] usbhid: probe of 5-1:0.0 failed with error -71 [ 1237.071085][ T8503] usb 3-1: USB disconnect, device number 78 [ 1237.082196][ T3720] usb 5-1: USB disconnect, device number 54 00:43:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x7ff, 0x2042) pwrite64(r0, &(0x7f0000000100)="10", 0x1, 0x0) [ 1237.603313][ T8503] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1237.844229][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1237.973852][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1237.986898][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1237.996232][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.046421][ T8503] usb 3-1: config 0 descriptor?? [ 1238.090649][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1239.600977][ T8503] usb 3-1: USB disconnect, device number 79 00:43:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x7ff, 0x2042) r1 = dup2(r0, r0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x78) 00:43:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) 00:43:39 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:39 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x0, 0x0, 0xc}, 0x20) 00:43:39 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) lseek(r0, 0x0, 0x3) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') [ 1240.065033][T22898] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1240.214127][ T8503] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1240.298996][T25537] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1240.453531][ T8503] usb 3-1: Using ep0 maxpacket: 16 00:43:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xb001}, 0x4) [ 1240.487739][T22898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.498865][T22898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.508941][T22898] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1240.518226][T22898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.574997][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1240.588450][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1240.597779][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.604786][T22898] usb 5-1: config 0 descriptor?? [ 1240.731621][ T8503] usb 3-1: config 0 descriptor?? [ 1240.788947][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1240.984892][ T8503] usb 3-1: USB disconnect, device number 80 [ 1241.134367][T22898] usbhid 5-1:0.0: can't add hid device: -71 [ 1241.140651][T22898] usbhid: probe of 5-1:0.0 failed with error -71 [ 1241.196257][T22898] usb 5-1: USB disconnect, device number 55 00:43:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) [ 1241.564257][ T8503] usb 3-1: new high-speed USB device number 81 using dummy_hcd 00:43:41 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x194affd, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\xb7\x9d\x00\x00\x00', 0x0) 00:43:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1241.803598][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1241.925040][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1241.938434][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1241.947746][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.060618][ T8503] usb 3-1: config 0 descriptor?? [ 1242.121909][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1242.433636][T22103] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1242.817732][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.835517][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.845560][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1242.854794][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.061703][T22103] usb 5-1: config 0 descriptor?? 00:43:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:43 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x194affd, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\xb7\x9d\x00\x00\x00', 0x0) 00:43:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:43 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1243.460763][ T8503] usb 3-1: USB disconnect, device number 81 00:43:43 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x194affd, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\xb7\x9d\x00\x00\x00', 0x0) [ 1243.633747][T22103] usbhid 5-1:0.0: can't add hid device: -71 [ 1243.642735][T22103] usbhid: probe of 5-1:0.0 failed with error -71 [ 1243.747864][T22103] usb 5-1: USB disconnect, device number 56 00:43:43 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x194affd, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\xb7\x9d\x00\x00\x00', 0x0) [ 1244.123377][ T8503] usb 3-1: new high-speed USB device number 82 using dummy_hcd 00:43:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1244.363764][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1244.484140][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.497352][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1244.506720][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.626373][ T8503] usb 3-1: config 0 descriptor?? [ 1244.672570][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1244.876284][ T8503] usb 3-1: USB disconnect, device number 82 [ 1244.885664][ T7] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1245.255335][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.266774][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.276971][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1245.287558][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.404589][ T7] usb 5-1: config 0 descriptor?? [ 1245.503946][ T8503] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1245.746741][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1245.886480][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1245.900880][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1245.910500][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.984173][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 1245.990616][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 1246.025959][ T8503] usb 3-1: config 0 descriptor?? [ 1246.048764][ T7] usb 5-1: USB disconnect, device number 57 [ 1246.068965][ T8503] hub 3-1:0.0: bad descriptor, ignoring hub [ 1246.075265][ T8503] hub: probe of 3-1:0.0 failed with error -5 [ 1246.087278][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1247.494095][ T8503] usb 3-1: USB disconnect, device number 83 00:43:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001a80)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=[@dstopts={{0x18}}, @dontfrag={{0x14}}], 0x30}, 0x0) 00:43:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2004c080) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:43:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:47 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:47 executing program 1: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x1}, 0x0, &(0x7f0000000140)={0x77359400}) 00:43:47 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/current\x00'}, 0x24) [ 1248.303910][T22103] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1248.339675][ T8518] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1248.473653][ T33] audit: type=1400 audit(1607647428.101:369): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=25666 comm="syz-executor.0" 00:43:48 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) memfd_create(&(0x7f0000000780)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8c\xecR\xb2\x1b\x99vS\xa6K&u\x9dX\xcc\r\x12\x01\x00\x00\x80\x00\x00\x00\x00E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\xaf\xfdj\x83nj\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c\xdc\xa8\xd30HX\xe9\t\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89m3\x1d\x1c@\x8eu\x85\xce\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D+\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \x00\x00\x00\x00\x99\xdd\x80\x03\xec@\x9f\x8elx\b\xf1\xb4^X\x99\xbb\xa0\xf5Bx\xa9cT\f\x99\xbf\xb5\xebj.t\xa2\xaeM\x9c\x14_\x19\xe1\xe0H\x16\xedi:\x00\x00\x00\x00\x00\x00\x00\x00\xca\x97\xba\xf2\x1b\xeb\xa5h\xeb\xb0\xc0xe\xa3\x12\xcb\xe7\xd8\xa2nBP\xaf(\xb0\x8a\xdb\xa2M\xf1\x84\x05\x8cK\x8b\x93\xe9\x9f\xf6\xfd\xb49|\xb1\x1bF\toBx\xd6\xad\xfdF\xee8\xca\x95|\xe2\x84\x11\x1c\x81M\a\x04\xd6\xd1\xed4\xc8\x82\xf2C\xf61\x93X8\x99M\xf1B\xac\xd7\xc7\x1d\x8f\xb2\x80\xf4\x1a\n\xe5\x8e\x80x^k\xfc\n\xd9?g\xa2\x7f!\xdf,\x7f\xa2\xa43\xd3h\xfd\xe7\x1b\x148\x191M\xf4O\xd1%\xa55\x9f[CBF\x00T\xf0\xdf\xe1\xfdK2(cy\x18K\xef\xfe\xeb\xdf\xc9cX\xf4\xf9\x91._\x9b%\x1a[\xa9ql\x19\xf1\x9bYF\x1e\x90\'\xe5\xd2\x19\f&{\xdb\xdd\xef\xc4j\xf4@\x8bc\xec(\xb7\xdb\x85\xa3v&;\xaf\xd9\xed$\x9f\x1b0\xad|\xb7&\xbb\xcd\xae\x85\x1c\x865\xb7\xd4_r\xf1', 0x0) [ 1248.585091][ T8518] usb 3-1: Using ep0 maxpacket: 16 [ 1248.694521][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.705921][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.706675][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1248.715996][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 00:43:48 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/current\x00'}, 0x24) [ 1248.728904][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1248.738063][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.747160][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:48 executing program 1: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 1248.962345][ T8518] usb 3-1: config 0 descriptor?? [ 1248.984448][T22103] usb 5-1: config 0 descriptor?? [ 1249.026244][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1249.099593][ T33] audit: type=1400 audit(1607647428.731:370): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=25675 comm="syz-executor.0" [ 1249.222171][T22898] usb 3-1: USB disconnect, device number 84 00:43:48 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/current\x00'}, 0x24) 00:43:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) [ 1249.523298][T22103] usbhid 5-1:0.0: can't add hid device: -71 [ 1249.529738][T22103] usbhid: probe of 5-1:0.0 failed with error -71 [ 1249.565797][ T33] audit: type=1400 audit(1607647429.201:371): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=25689 comm="syz-executor.0" [ 1249.575569][T22103] usb 5-1: USB disconnect, device number 58 00:43:49 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/current\x00'}, 0x24) [ 1249.813677][T22898] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1249.951780][ T33] audit: type=1400 audit(1607647429.581:372): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=25697 comm="syz-executor.0" [ 1250.053894][T22898] usb 3-1: Using ep0 maxpacket: 32 00:43:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1250.184066][T22898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1250.198876][T22898] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1250.208546][T22898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.263801][T22898] usb 3-1: config 0 descriptor?? [ 1250.314860][T22898] hub 3-1:0.0: bad descriptor, ignoring hub [ 1250.320994][T22898] hub: probe of 3-1:0.0 failed with error -5 [ 1250.333607][T22898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1250.663928][T22103] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1251.054544][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.065849][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.075973][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1251.087097][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:50 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfa}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1251.227515][T22103] usb 5-1: config 0 descriptor?? 00:43:50 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:51 executing program 1: bpf$MAP_CREATE(0x11, 0x0, 0x0) 00:43:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c88ca6ae09bd47f, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1251.766635][T22103] usbhid 5-1:0.0: can't add hid device: -71 [ 1251.773760][T22103] usbhid: probe of 5-1:0.0 failed with error -71 [ 1251.813792][ T8518] usb 3-1: USB disconnect, device number 85 [ 1251.844393][T22103] usb 5-1: USB disconnect, device number 59 00:43:51 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x6082, 0x0) 00:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0xffffffdf, &(0x7f0000000000)={0x0, 0x13}}, 0x0) [ 1252.253586][ T8518] usb 3-1: new high-speed USB device number 86 using dummy_hcd 00:43:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1252.493190][ T8518] usb 3-1: Using ep0 maxpacket: 16 00:43:52 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 00:43:52 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) [ 1252.614454][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1252.627752][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1252.637482][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.746601][ T8518] usb 3-1: config 0 descriptor?? [ 1252.790482][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1252.983237][T22103] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1253.001018][ T2087] usb 3-1: USB disconnect, device number 86 00:43:52 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) 00:43:52 executing program 0: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', 0x0}) [ 1253.373371][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.373448][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.373553][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1253.373619][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.418801][T22103] usb 5-1: config 0 descriptor?? [ 1253.603768][ T2087] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1253.863313][ T2087] usb 3-1: Using ep0 maxpacket: 32 [ 1253.964358][T22103] usbhid 5-1:0.0: can't add hid device: -71 [ 1253.972120][T22103] usbhid: probe of 5-1:0.0 failed with error -71 [ 1254.043741][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1254.056901][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1254.066233][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.080779][T22103] usb 5-1: USB disconnect, device number 60 [ 1254.123166][ T2087] usb 3-1: config 0 descriptor?? [ 1254.166139][ T2087] hub 3-1:0.0: bad descriptor, ignoring hub [ 1254.172256][ T2087] hub: probe of 3-1:0.0 failed with error -5 [ 1254.186176][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:54 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xf6}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:54 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:43:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0x2d35, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 00:43:55 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf0ff7f00000000}}, 0x0) 00:43:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1255.664607][ T2087] usb 3-1: USB disconnect, device number 87 [ 1256.044485][ T8518] usb 5-1: new high-speed USB device number 61 using dummy_hcd 00:43:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:43:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x2d35}, 0x14}}, 0x0) [ 1256.283357][ T2087] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1256.404542][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.415652][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.425693][ T8518] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1256.435151][ T8518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.518599][ T8518] usb 5-1: config 0 descriptor?? [ 1256.533771][ T2087] usb 3-1: Using ep0 maxpacket: 16 [ 1256.664482][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1256.677644][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1256.686990][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x8, 0x1, &(0x7f0000001200)=@raw=[@exit], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 1256.802436][ T2087] usb 3-1: config 0 descriptor?? [ 1256.865444][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) [ 1257.061964][ T2087] usb 3-1: USB disconnect, device number 88 [ 1257.094063][ T8518] usbhid 5-1:0.0: can't add hid device: -71 [ 1257.100337][ T8518] usbhid: probe of 5-1:0.0 failed with error -71 00:43:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 1257.270856][ T8518] usb 5-1: USB disconnect, device number 61 00:43:57 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "04501e07"}, 0x0, 0x0, @planes=0x0}) [ 1257.638725][ T2087] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1257.894311][ T2087] usb 3-1: Using ep0 maxpacket: 32 00:43:57 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xf6}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1258.034094][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1258.047098][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1258.056630][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:43:57 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1258.165266][ T2087] usb 3-1: config 0 descriptor?? [ 1258.204773][ T2087] hub 3-1:0.0: bad descriptor, ignoring hub [ 1258.210906][ T2087] hub: probe of 3-1:0.0 failed with error -5 [ 1258.225482][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:43:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:43:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:43:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x2, 0x2, &(0x7f0000000040)=@framed={{}, [@map_val, @alu]}, &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x15) 00:43:59 executing program 0: bpf$MAP_CREATE(0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:43:59 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1259.793896][ T8517] usb 3-1: USB disconnect, device number 89 00:43:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x2, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val, @alu]}, &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x15) 00:43:59 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 1260.194450][ T8518] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1260.323631][ T8503] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1260.556452][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.567768][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.577951][ T8518] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1260.590391][ T8518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.603783][ T8503] usb 3-1: Using ep0 maxpacket: 16 00:44:00 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x2, &(0x7f00000002c0)=@string={0x2}}]}) 00:44:00 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x80000000, 0x0, 0x0) [ 1260.717226][ T8518] usb 5-1: config 0 descriptor?? [ 1260.731751][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1260.746475][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1260.756152][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.799775][ T8503] usb 3-1: config 0 descriptor?? [ 1260.853376][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1261.069443][T22898] usb 3-1: USB disconnect, device number 90 [ 1261.173427][ T2087] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1261.216495][ T8518] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1261.258485][ T8518] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input33 00:44:01 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xf6}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1261.347947][ T8518] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1261.422351][ T8518] usb 5-1: USB disconnect, device number 62 [ 1261.443238][ T2087] usb 1-1: Using ep0 maxpacket: 16 [ 1261.593630][ T2087] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1261.674418][T22898] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1261.805088][ T2087] usb 1-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 1261.815294][ T2087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.823597][ T2087] usb 1-1: Product: syz [ 1261.827853][ T2087] usb 1-1: SerialNumber: syz 00:44:01 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x2, [@int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xe2}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1261.953370][T22898] usb 3-1: Using ep0 maxpacket: 32 [ 1262.042489][ T2087] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 00:44:01 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf0ff7f00000000}, 0x300}, 0x0) [ 1262.088577][T22898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1262.101723][T22898] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1262.111574][T22898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.203255][T22898] usb 3-1: config 0 descriptor?? [ 1262.241435][ T8518] usb 1-1: USB disconnect, device number 52 [ 1262.256289][T22898] hub 3-1:0.0: bad descriptor, ignoring hub [ 1262.262479][T22898] hub: probe of 3-1:0.0 failed with error -5 [ 1262.283629][T22898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1263.030242][ T8518] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1263.273996][ T8518] usb 1-1: Using ep0 maxpacket: 16 [ 1263.394641][ T8518] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 00:44:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:44:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x2000008c, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0x0, {}, [{0x3b8, 0x1, [@m_simple={0x144, 0x0, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, ']S,\'^(++){!\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}]}, {0xd5, 0x6, "30046fbaf89dfe25eaadad95b1fc9a2317735eac8c2e33d6aea513f3f95bade5a2a443af2bfdb7ce4895aea9c79095192a8db3f7b25ac94926973d46773a2060e3404fa48e3d26224e093e2a0fc110759cdbb9d4084ebf388109bf0b96f8706f4e8bd696bf688b0241427ad3f06ecd37bcd6f341865996ae07f6a3c05c364ef7a0d14f5430d840a0d42f2d01874eec0a420eee8e0ab47c9ea1409877f57a793cb5a710d7a3fa606e9adc0dd8448f4b303d55885354f4c0f2fa6a94c0dc82f131be4ec7adfd9fe85efd5a1febcda7964d2a"}, {0xc}, {0xc}}}, @m_ct={0x11c, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_ACTION={0x6}]}, {0xc9, 0x6, "d8ed2211a91762ff2f4f3b61faba053f264f18f719d6374ff80cdbfc492329b2d8757e2ec30c32ef3b87705006cfe9e82d7012b297c375925ec9d505760397aeea24f70d07e48985b81f989a2544722bc5c9bbe5e2407e167e14ccb575637377d359addd5bd32fb0f2f5130d348111885a3f09a26606c2e9261be156b78287c2b75a267857180df80cedd24e343c9f88c0c8213764042d3521c49de49a122dccbc3abe2df066d91bf151c43c4fe2ad2412f1b3520928e3bb8f15233b0e66897288ef820bfe"}, {0xc}, {0xc}}}, @m_police={0x6c, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x25, 0x6, "34d0d7488a721852db80909bc7b6a426b575fddc26cbbf983968b84289c78cd4bf"}, {0xc}, {0xc}}}, @m_csum={0xe8, 0x0, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x49, 0x6, "85200baf29ace2cdef037645cd33f35676b9c825bdd7de165358ad903c9e991efc1354f214192e6967020c1b0df213e780ab9ae00a29c793ee0ae8ce9600711f5091621dcd"}, {0xc}, {0xc}}}]}, {0x5ec, 0x1, [@m_mirred={0x208, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0xd9, 0x6, "8516c300a528c5721c78a5082419ca97c29bf1e1b895d37111db445a625562b9766469da8ca4d68cf9eff43aa3457430608f4e612f6e8f7d9bd69e829c7de99ba0acd7b640d73bdae822e5636e08ac9f71d39ad657921e828a9a5a46966ef2e4e92a995583b645bfbee2bbbec11b1612858c67998ac3be3a4aa5e459aca678fe6df478f2aa434962ce62fde6173fcfb0466d2ceda1f068d185e0a7c1321f476b20338be9b16189be21ab9c4ac4c58802b625183d96bb4010d7f4bfb35a6ded1f20403d2a828971fdce2b343a82b523f1586883d00b"}, {0xc}, {0xc}}}, @m_tunnel_key={0xc4, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x51, 0x6, "f6025ea3c1f633c95578daa6a8ad2184e0446fb52e784fca6068cbafef2c951bce9cd0c36f1f35cec09197d4b3075587850370c0f97b5fd36420d3a186936fd4af135b5b33c2668e1cf73a4943"}, {0xc}, {0xc}}}, @m_sample={0x74, 0x0, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x3d, 0x6, "8ef9bca885cf776486779cf7ee83c97d09968a236a30487e8ae40c8fe503ded6f396061c858876e250a4592070ba948ca73ea90ed49fae9bd9"}, {0xc}, {0xc}}}, @m_ct={0xec, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_MARK={0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private}, @TCA_CT_ZONE={0x6}, @TCA_CT_LABELS={0x14, 0x7, "6331a32b2508a0eeaa941b0caa1a61aa"}]}, {0x65, 0x6, "08d3343928f34ecd68c51b4d2daa030022bf774f8c2f4866388524386dd1d5578c4d47f89a9dc8811d4199a6b4f5c33d2e0dacff512656c2a5916672dc3d4f3c664046dc6c42e60d323b0e1c35baeec8cd3a989812614d587841ea29a6e04fe9f2"}, {0xc}, {0xc}}}, @m_ct={0x134, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d3c194ffbe66938b6140698d8cbd0167"}, @TCA_CT_LABELS={0x14, 0x7, "6268ced3db49da42b138efa522cfc7f2"}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_LABELS={0x14, 0x7, "9318b6435a3c9c8ab1039af77b894afb"}, @TCA_CT_MARK={0x8}]}, {0x95, 0x6, "4477c21c088931717c8972c91eaa24b5bcb98ee1112024c7dc5614651586389982ffccce63d3a78c299ee50d7388c8eaca55f22e725dc25413becdf2fd3ce3568bac5e6502e26080a99926e451e14aff70c97e81cace0d2a0a42f297baf0d810bcc465d05c487ab7112bf6b27051726da35ee3d3897f276c167ac7f6d98f5a18da5b421e0020f22c3e9d2eb69744276bb0"}, {0xc}, {0xc}}}, @m_ctinfo={0x88, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x39, 0x6, "d9b843f8231fcfa170ba90249c140b56c1e27214113a8614373a61791a6926bd12adc865b4b852affc1354cce4f7873a294b36d5ad"}, {0xc}, {0xc}}}]}, {0x50c, 0x1, [@m_mpls={0x1a4, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6}]}, {0xe9, 0x6, "881140f6698b9fa1362493d75517e8126c1a7861c3cc355482e604d5cfa96fd28a253dec443938df4bf7def1bdb7faf11aef7f3ab6c5d77ebe427e14a4f91382debb5a39d6da9d6357b3a6f5fce03112286b11b45177bdfb6141bc5f889ef6b70126e501bdeaac92c21443cb6e15e32b5827cf5aad9ab0150b902c0c69d9a83fdf3fb24a632d80116af06a735dc920a26bd77837a4dbb3e0157b5dd9bb06d55702702e71f54fe87ea984ce157f92a85738b61925afc328703ae5231711bfb58c95133cff36ebcc020eee3aa8cd85792184ba2d4dc36b59d124be8312ba9d96e278efeb3212"}, {0xc}, {0xc}}}, @m_ipt={0x364, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x339, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xec4}}, 0x0) 00:44:03 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1263.564711][ T8518] usb 1-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 1263.574346][ T8518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.582436][ T8518] usb 1-1: Product: syz [ 1263.586904][ T8518] usb 1-1: SerialNumber: syz [ 1263.664507][T22898] usb 3-1: USB disconnect, device number 91 [ 1263.774000][ T8518] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 00:44:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x20, 0x0, 0x1}, 0x5f) 00:44:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x2, 0x18, &(0x7f0000000040)=@framed={{}, [@map_val, @alu]}, &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x15) [ 1263.981897][ T8503] usb 1-1: USB disconnect, device number 53 [ 1264.025047][ T7] usb 5-1: new high-speed USB device number 63 using dummy_hcd 00:44:03 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1264.113201][ T8518] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1264.357784][ T8518] usb 3-1: Using ep0 maxpacket: 16 00:44:04 executing program 0: bpf$MAP_CREATE(0x3, 0x0, 0x9e) [ 1264.395724][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.407122][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.420372][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1264.429792][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:44:04 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 1264.547212][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1264.560373][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1264.569847][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.638863][ T7] usb 5-1: config 0 descriptor?? [ 1264.678686][ T8518] usb 3-1: config 0 descriptor?? [ 1264.732643][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:04 executing program 0: syz_io_uring_setup(0x1b47, &(0x7f0000000000)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1264.952399][ T8518] usb 3-1: USB disconnect, device number 92 [ 1265.175763][ T7] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1265.231506][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input34 00:44:04 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x2, [@int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xe2}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:04 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) [ 1265.341036][ T7] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1265.430095][ T7] usb 5-1: USB disconnect, device number 63 [ 1265.558431][ T8518] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1265.733288][ T8507] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1265.814521][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 1265.934794][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1265.948111][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1265.957492][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.993584][ T8507] usb 2-1: Using ep0 maxpacket: 16 [ 1266.045602][ T8518] usb 3-1: config 0 descriptor?? [ 1266.085375][ T8518] hub 3-1:0.0: bad descriptor, ignoring hub [ 1266.091503][ T8518] hub: probe of 3-1:0.0 failed with error -5 [ 1266.108279][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1266.127937][ T8507] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1266.377190][ T8507] usb 2-1: string descriptor 0 read error: -22 [ 1266.383807][ T8507] usb 2-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 1266.393140][ T8507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.459106][ T8507] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1266.657189][ T8507] usb 2-1: USB disconnect, device number 15 [ 1267.433405][ T8507] usb 2-1: new high-speed USB device number 16 using dummy_hcd 00:44:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:07 executing program 0: bpf$MAP_CREATE(0x8, 0x0, 0x0) 00:44:07 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x2, [@int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xe2}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:44:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1267.724045][ T8507] usb 2-1: Using ep0 maxpacket: 16 [ 1267.746123][ T8518] usb 3-1: USB disconnect, device number 93 [ 1267.848233][ T8507] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 00:44:07 executing program 0: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x282) [ 1268.101964][ T8507] usb 2-1: string descriptor 0 read error: -22 [ 1268.108614][ T8507] usb 2-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 1268.119253][ T8507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.134202][ T8517] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1268.233401][ T8518] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1268.341261][ T8507] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 00:44:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}, @mcast1}}) [ 1268.504863][ T8518] usb 3-1: Using ep0 maxpacket: 16 [ 1268.543635][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.556235][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.566461][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1268.575742][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:44:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 0x44c, 0x1}, 0x40) [ 1268.628074][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1268.637546][T22898] usb 2-1: USB disconnect, device number 16 [ 1268.641356][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1268.655598][ T8517] usb 5-1: config 0 descriptor?? [ 1268.656537][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.794083][ T8518] usb 3-1: config 0 descriptor?? [ 1268.844329][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000000040)={0x14, 0x1a, 0x611, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 1269.049634][ T8507] usb 3-1: USB disconnect, device number 94 00:44:08 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) read$char_raw(0xffffffffffffffff, 0x0, 0xce00) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) [ 1269.166861][ T8517] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1269.224832][ T8517] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input35 00:44:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x1c, 0x20, 0x611, 0x0, 0x0, "", [@generic="027098b3bb3816c481"]}, 0x1c}], 0x1}, 0x0) [ 1269.339959][ T8517] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1269.438721][ T8517] usb 5-1: USB disconnect, device number 64 [ 1269.603515][ T8507] usb 3-1: new high-speed USB device number 95 using dummy_hcd 00:44:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x4, [@datasec={0x0, 0x5, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}], "e1"}, @restrict]}, {0x0, [0x0, 0x0]}}, 0x0, 0x74}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1269.848656][ T8507] usb 3-1: Using ep0 maxpacket: 32 [ 1269.977114][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1269.990476][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1269.999824][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.043591][ T8507] usb 3-1: config 0 descriptor?? [ 1270.085698][ T8507] hub 3-1:0.0: bad descriptor, ignoring hub [ 1270.091829][ T8507] hub: probe of 3-1:0.0 failed with error -5 [ 1270.104515][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)=@newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 00:44:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) 00:44:11 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:11 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1271.534000][ T8507] usb 3-1: USB disconnect, device number 95 00:44:11 executing program 0: io_setup(0x80000001, &(0x7f0000000040)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000000180)=[{}, {}, {}], 0x0) io_destroy(r0) [ 1271.905422][ T8517] usb 5-1: new high-speed USB device number 65 using dummy_hcd 00:44:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1272.074712][T22103] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1272.317563][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.328825][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.343911][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1272.353134][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.362378][T22103] usb 3-1: Using ep0 maxpacket: 16 [ 1272.427188][ T8517] usb 5-1: config 0 descriptor?? 00:44:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1272.503801][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1272.519088][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1272.528738][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.587594][T22103] usb 3-1: config 0 descriptor?? [ 1272.640697][T22103] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1272.838629][T22103] usb 3-1: USB disconnect, device number 96 [ 1272.915409][ T8517] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 1272.944050][ T8517] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input36 [ 1273.084924][ T8517] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 00:44:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f00000003c0)="8f37e23ec6d945bb753d48647fde54cd814a9c4773333ae09ebd87775aaa5b2220233fc60210bd7af78ebd5a3a77057da2b52ac2cc81b87c5d3f09d6732ebd18e30b12e8470f55ada6f8fc4d220324b99bce6be1ecea0a14b48870127a7ac1e3194639e0f9391cc96cbc1fff42007d95dda8f6ec9dccad0aaae31204a59864d6dbcc9b394e849c10f5bf062fcf422859afa5fa7cba2ee50933514fcd5000000000000000f1cb04b9040cdf33845f95", 0xfe76, 0xc080, 0x0, 0x0) [ 1273.202936][ T8517] usb 5-1: USB disconnect, device number 65 [ 1273.429738][T22103] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1273.703709][T22103] usb 3-1: Using ep0 maxpacket: 32 00:44:13 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r6 = memfd_create(&(0x7f0000000480)='\x00\xdaN\x8c\x98\x97\x15\x11\xc4q+\xa01F\x00\x00\x00\x00\x00\b\xb8\xec\xfd\xc0\xde\x93Z\xed\x1a\x01\xe5\xec\x03J\xa8\xb2\xceR\t\x01Q\x9f\'\b&\xdf>T\x92\x9b\xfa\x1c\x17Bi\x98\x82K\xf6\xb5\xbb2[\xd9U\a\x13\xb3\xb3\vj\x1d\xcd3A\x9b\xc6@\xb4}\xaco\x9a\xe6\x1f\x8c\xf3\x8aS\xf4\x7f\x94\xb5\xa9ZP\x8b\x1d4\x99%\x85mN\xe0\x19\xd2\xd3Es|:\x8aJ~m\xb6\xb1|\xc4\xe0w\xe5\xe2\xa5\xaes\xb4\xbb\xf2\x890p\x93\x13+\xa6\x1d\xe3\a\t}\x050\x98bs5\xd7\xa6L\xbd\t\xe6\xea\x9d\x17\xfb]h\xee\xd6\\\\\xb5\xd1E\xf3f\x8d\x17\xba2\xe2\xd4RW\xcfLx\x1f\x98/\xd8\x83\xc5E\xef\xddd@p', 0x0) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18181b, 0x0) sendfile(r5, r6, 0x0, 0x200000f) fallocate(r1, 0x11, 0x8, 0xffff) 00:44:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "e1"}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x6a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1273.857645][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1273.870677][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1273.884764][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.000880][T22103] usb 3-1: config 0 descriptor?? [ 1274.077914][T22103] hub 3-1:0.0: bad descriptor, ignoring hub [ 1274.084216][T22103] hub: probe of 3-1:0.0 failed with error -5 [ 1274.096215][T22103] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1274.533307][ T8507] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1274.894004][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.905237][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.915353][ T8507] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1274.924679][ T8507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.010450][ T8507] usb 5-1: config 0 descriptor?? 00:44:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2404473d, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 00:44:15 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:15 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1275.454173][ T8517] usb 3-1: USB disconnect, device number 97 [ 1275.495590][ T8507] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 1275.543364][ T8507] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input37 [ 1275.691450][ T8507] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 00:44:15 executing program 0: pipe2(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$usbip_server(r0, 0x0, 0x0) 00:44:15 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1275.792793][ T8507] usb 5-1: USB disconnect, device number 66 [ 1275.804834][T22103] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1276.063410][T22103] usb 3-1: Using ep0 maxpacket: 16 00:44:15 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1276.208929][T22103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1276.221943][T22103] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1276.231282][T22103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.311800][T22103] usb 3-1: config 0 descriptor?? [ 1276.360316][T22103] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:16 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000002dc0)) 00:44:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/220) [ 1276.581710][ T8517] usb 3-1: USB disconnect, device number 98 00:44:16 executing program 0: write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) [ 1277.065868][ T8507] usb 5-1: new high-speed USB device number 67 using dummy_hcd 00:44:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002c80)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 00:44:16 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) pipe2(&(0x7f0000000380), 0x84000) socket$nl_generic(0x10, 0x3, 0x10) [ 1277.193418][ T8517] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1277.437224][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.448671][ T8507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.458700][ T8507] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1277.467954][ T8507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.473589][ T8517] usb 3-1: Using ep0 maxpacket: 32 [ 1277.569971][ T8507] usb 5-1: config 0 descriptor?? [ 1277.593710][ T8517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1277.606762][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1277.616229][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.718342][ T8517] usb 3-1: config 0 descriptor?? [ 1277.769977][ T8517] hub 3-1:0.0: bad descriptor, ignoring hub [ 1277.776640][ T8517] hub: probe of 3-1:0.0 failed with error -5 [ 1277.788724][ T8517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1278.065869][ T8507] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 1278.094273][ T8507] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001B/input/input38 [ 1278.200167][ T8507] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1278.282949][ T8507] usb 5-1: USB disconnect, device number 67 00:44:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000007, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xffffff91}, 0x1c) 00:44:18 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001c00)) 00:44:18 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/220) 00:44:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1279.224622][ T8507] usb 3-1: USB disconnect, device number 99 00:44:19 executing program 1: pselect6(0x40, &(0x7f0000002a40), 0x0, &(0x7f0000002ac0)={0xea}, 0x0, 0x0) [ 1279.734277][T22103] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1279.780950][ T8507] usb 3-1: new high-speed USB device number 100 using dummy_hcd 00:44:19 executing program 1: syz_open_dev$usbfs(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) [ 1280.023387][ T8507] usb 3-1: Using ep0 maxpacket: 16 [ 1280.143467][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1280.145302][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.156768][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1280.167651][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:44:19 executing program 0: socketpair(0x29, 0x0, 0x0, &(0x7f0000001900)) [ 1280.176712][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.186578][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1280.205609][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:44:20 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f0000000680)) [ 1280.439008][ T8507] usb 3-1: config 0 descriptor?? [ 1280.442050][T22103] usb 5-1: config 0 descriptor?? [ 1280.497204][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:20 executing program 0: syz_open_dev$dri(&(0x7f0000000880)='/dev/dri/card#\x00', 0x1000, 0xa2580) [ 1280.692351][ T8518] usb 3-1: USB disconnect, device number 100 [ 1280.925827][T22103] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor 00:44:20 executing program 1: syz_open_dev$dmmidi(&(0x7f00000018c0)='/dev/dmmidi#\x00', 0x0, 0x0) [ 1281.007827][T22103] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input39 [ 1281.167135][T22103] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1281.219580][T22103] usb 5-1: USB disconnect, device number 68 [ 1281.253437][ T8518] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1281.493279][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 1281.613460][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1281.626717][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1281.637426][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.698457][ T8518] usb 3-1: config 0 descriptor?? [ 1281.747150][ T8518] hub 3-1:0.0: bad descriptor, ignoring hub [ 1281.753730][ T8518] hub: probe of 3-1:0.0 failed with error -5 [ 1281.765818][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:22 executing program 0: syz_open_dev$dri(&(0x7f0000000880)='/dev/dri/card#\x00', 0x0, 0xa2580) 00:44:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002a80)={&(0x7f0000000940)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x29, 0x45, "052c399eec851f87c29e2f3735de5378375545c7667ec4936774fed574afc27db1ba1a0086"}, @NL80211_ATTR_TESTDATA={0xe81, 0x45, "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"}]}, 0xec4}}, 0x0) 00:44:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/220) 00:44:22 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:22 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1283.274285][ T2087] usb 3-1: USB disconnect, device number 101 00:44:23 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1283.465941][T26483] ptrace attach of "/root/syz-executor.3"[26478] was attempted by "/root/syz-executor.3"[26483] [ 1283.573343][ T8503] usb 5-1: new high-speed USB device number 69 using dummy_hcd 00:44:23 executing program 0: syz_open_dev$usbfs(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0xe8a7, 0x0) 00:44:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) [ 1283.804471][ T2087] usb 3-1: new high-speed USB device number 102 using dummy_hcd 00:44:23 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000a80)) [ 1283.940233][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.951491][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.961761][ T8503] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1283.973231][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.053748][ T2087] usb 3-1: Using ep0 maxpacket: 16 [ 1284.194155][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1284.207360][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1284.216700][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.217008][ T8503] usb 5-1: config 0 descriptor?? 00:44:24 executing program 1: pselect6(0x40, &(0x7f0000002a40), 0x0, &(0x7f0000002ac0), 0x0, 0x0) [ 1284.504762][ T2087] usb 3-1: config 0 descriptor?? [ 1284.560860][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1284.715770][ T8503] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1284.759739][ T2087] usb 3-1: USB disconnect, device number 102 [ 1284.762828][ T8503] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001D/input/input40 00:44:24 executing program 0: syz_open_dev$dri(&(0x7f0000000880)='/dev/dri/card#\x00', 0x0, 0x0) [ 1284.954903][ T8503] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1285.042281][ T8503] usb 5-1: USB disconnect, device number 69 [ 1285.343857][ T2087] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1285.630576][ T2087] usb 3-1: Using ep0 maxpacket: 32 [ 1285.763559][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1285.776816][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1285.786173][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.871471][ T2087] usb 3-1: config 0 descriptor?? [ 1285.926289][ T2087] hub 3-1:0.0: bad descriptor, ignoring hub [ 1285.934853][ T2087] hub: probe of 3-1:0.0 failed with error -5 [ 1285.947347][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000019c0)=[{}, {}], 0x40) 00:44:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/220) 00:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_open_dev$dri(&(0x7f0000000880)='/dev/dri/card#\x00', 0x1000, 0xa2580) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:44:27 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:27 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1287.503644][ T8518] usb 3-1: USB disconnect, device number 103 00:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7a, 0xbe, "ad9e08ad50e9fc780b47bbee889cfd70aa07d73d0b0c6ca6696cffa8aab33f03c1a8586f633ad78d007356a9f31631baf2b7f901e911f1420be7aacd3872ae0f306fd6977d31f559b5c8385fe230e4ec51cc12efd3418d98c8439d43dc5fac454ffc59f6b4b2a14f57da1bd4ab19a91c478389a5e1a8"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_open_dev$dri(&(0x7f0000000880)='/dev/dri/card#\x00', 0x1000, 0xa2580) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002bc0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x2c}}, 0x4800) socketpair(0x5, 0x3, 0x800, &(0x7f0000002dc0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40)='nl80211\x00') [ 1287.844276][T22103] usb 5-1: new high-speed USB device number 70 using dummy_hcd 00:44:27 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:27 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000140)={0x58, 0x13, 0xbf2f187e5ebbf60f, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x2, 0x1, "0c7f3f48d3dc1b75"}]}, 0x58}}, 0x0) [ 1288.073198][ T8518] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1288.214887][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.226074][T22103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.240802][T22103] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1288.250051][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.325259][ T8518] usb 3-1: Using ep0 maxpacket: 16 00:44:28 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) mq_open(&(0x7f0000000100)='!}\x00', 0x40, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) pipe(&(0x7f0000000200)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1288.446110][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1288.451805][T22103] usb 5-1: config 0 descriptor?? [ 1288.459551][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1288.474140][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.616147][ T8518] usb 3-1: config 0 descriptor?? [ 1288.661472][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:28 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 1288.860638][ T8518] usb 3-1: USB disconnect, device number 104 00:44:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2283, &(0x7f0000001180)) [ 1288.946944][T22103] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 1288.986873][T22103] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001E/input/input41 [ 1289.081651][T22103] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1289.182916][ T8517] usb 5-1: USB disconnect, device number 70 [ 1289.473536][ T8518] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1289.713365][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 1289.833745][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1289.846883][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1289.856308][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.882815][T26644] ptrace attach of "/root/syz-executor.0"[26606] was attempted by "/root/syz-executor.0"[26644] [ 1290.081854][ T8518] usb 3-1: config 0 descriptor?? [ 1290.142108][ T8518] hub 3-1:0.0: bad descriptor, ignoring hub [ 1290.148423][ T8518] hub: probe of 3-1:0.0 failed with error -5 [ 1290.160446][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:44:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) 00:44:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) 00:44:31 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:31 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1291.627974][ T8507] usb 3-1: USB disconnect, device number 105 00:44:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000140)={0x4c, 0x13, 0xbf2f187e5ebbf60f}, 0x4c}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) [ 1291.933997][ T8517] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1291.983421][ T8507] usb 3-1: new high-speed USB device number 106 using dummy_hcd 00:44:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) [ 1292.223197][ T8507] usb 3-1: Using ep0 maxpacket: 16 [ 1292.337954][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.345046][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1292.349110][ T8517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:44:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) [ 1292.362024][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1292.362095][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.399758][ T8517] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1292.409041][ T8517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.501180][ T8507] usb 3-1: config 0 descriptor?? 00:44:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) [ 1292.569285][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1292.750185][ T8507] usb 3-1: USB disconnect, device number 106 [ 1292.753617][ T8517] usb 5-1: config 0 descriptor?? 00:44:32 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 1293.235373][ T8517] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 1293.291625][ T8517] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001F/input/input42 [ 1293.305771][ T8507] usb 3-1: new high-speed USB device number 107 using dummy_hcd 00:44:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) [ 1293.520590][ T8517] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1293.610468][ T8517] usb 5-1: USB disconnect, device number 71 [ 1293.613941][ T8507] usb 3-1: Using ep0 maxpacket: 32 [ 1293.734552][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1293.747747][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1293.757401][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.872910][ T8507] usb 3-1: config 0 descriptor?? [ 1293.930822][ T8507] hub 3-1:0.0: bad descriptor, ignoring hub [ 1293.937652][ T8507] hub: probe of 3-1:0.0 failed with error -5 [ 1293.952601][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:34 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=ANY=[], 0xb8}, 0x0) 00:44:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) 00:44:34 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 00:44:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) 00:44:34 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1295.354983][ T8858] usb 3-1: USB disconnect, device number 107 00:44:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 1295.448998][T26766] ptrace attach of "/root/syz-executor.5"[26754] was attempted by "/root/syz-executor.5"[26766] [ 1295.701995][ T8858] usb 5-1: new high-speed USB device number 72 using dummy_hcd 00:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 00:44:35 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) [ 1295.933491][ T8507] usb 3-1: new high-speed USB device number 108 using dummy_hcd 00:44:35 executing program 1: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1296.097247][ T8858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.108356][ T8858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.118516][ T8858] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1296.127825][ T8858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:44:35 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) [ 1296.183739][ T8507] usb 3-1: Using ep0 maxpacket: 16 [ 1296.292698][ T8858] usb 5-1: config 0 descriptor?? [ 1296.304600][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1296.317764][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1296.327197][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.516822][ T8507] usb 3-1: config 0 descriptor?? [ 1296.565249][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000040)) [ 1296.758377][ T3720] usb 3-1: USB disconnect, device number 108 [ 1296.806621][ T8858] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1296.842869][ T8858] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input43 [ 1296.856760][T26794] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1296.962111][ T8858] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1297.047710][ T8858] usb 5-1: USB disconnect, device number 72 [ 1297.343412][ T3720] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1297.585354][ T3720] usb 3-1: Using ep0 maxpacket: 32 [ 1297.704587][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1297.719218][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1297.728924][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.756224][ T3720] usb 3-1: config 0 descriptor?? [ 1297.795239][ T3720] hub 3-1:0.0: bad descriptor, ignoring hub [ 1297.801372][ T3720] hub: probe of 3-1:0.0 failed with error -5 [ 1297.817142][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000028c0), 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:44:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x7, 0x0, 0x1f64, 0x0, "acafa61c514dec0ea111fb92adef7da566b059bc0438ba68a5e129026a2268f0"}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) 00:44:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2287, &(0x7f0000001180)) 00:44:38 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0xfe}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:38 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 1299.374369][T22898] usb 3-1: USB disconnect, device number 109 [ 1299.823418][ T8518] usb 5-1: new high-speed USB device number 73 using dummy_hcd 00:44:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f70eb4d04fe7ff7fc6e5539b07720e8b546a1b4530940f0890e0878f0e1ac6e7049b63b4956c409a242a5b67f3988f7ef319520100ffe8d178708c523c921b1b5d520a169b44d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1b7) 00:44:39 executing program 1: getresuid(&(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)) [ 1300.033801][ T8517] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1300.225130][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.236758][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.246923][ T8518] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1300.258651][ T8518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.313678][ T8517] usb 3-1: Using ep0 maxpacket: 16 [ 1300.397323][ T8518] usb 5-1: config 0 descriptor?? 00:44:40 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @multicast, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x8, 0x0, @local, "223d729e6d0b5d4a", @remote}}}}, 0x0) 00:44:40 executing program 1: request_key(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x2}, &(0x7f00000012c0)='enc=', 0xfffffffffffffffe) [ 1300.464374][ T8517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1300.479233][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1300.488840][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.674605][ T8517] usb 3-1: config 0 descriptor?? [ 1300.798210][ T8517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1300.875519][ T8518] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 1300.935005][ T8517] usb 3-1: USB disconnect, device number 110 [ 1300.978240][ T8518] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0021/input/input44 00:44:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:44:40 executing program 1: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000004200)) [ 1301.180928][ T8518] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1301.261806][ T8518] usb 5-1: USB disconnect, device number 73 [ 1301.513520][ T8517] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1301.793853][ T8517] usb 3-1: Using ep0 maxpacket: 32 [ 1301.940293][ T8517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1301.953588][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1301.962734][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.982692][ T8517] usb 3-1: config 0 descriptor?? [ 1302.032820][ T8517] hub 3-1:0.0: bad descriptor, ignoring hub [ 1302.039183][ T8517] hub: probe of 3-1:0.0 failed with error -5 [ 1302.051209][ T8517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:44:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227d, &(0x7f0000001180)) 00:44:43 executing program 0: mq_open(&(0x7f0000002100)='!\x00', 0x0, 0x0, &(0x7f0000002140)) 00:44:43 executing program 1: delete_module(&(0x7f0000000000), 0x0) 00:44:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:43 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1303.534698][ T8518] usb 3-1: USB disconnect, device number 111 00:44:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2288, &(0x7f0000001180)) 00:44:43 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f0000009a80)) 00:44:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x541) write$tun(r0, &(0x7f0000000040)={@void, @void, @ipv6=@tcp={0x0, 0x6, "1eedb6", 0xe58, 0x6, 0x0, @private1, @remote, {[@fragment={0x29, 0x0, 0x7, 0x0, 0x0, 0x6, 0x64}, @dstopts, @hopopts={0x0, 0x1b3, [], [@generic={0x81, 0x84, "83cfd693e6fa4de154203fd037c555d3c091ac5c9fb3b6c7466c6a689d6bbef0663f9b3622740b68db73e42fa491cf019a4a1c56003e004e405806b722edbeb196aa59a78e60794b9a630ef9bdddc5c7015b90b552a27b70e7b0e5d27983d121f0ff9fe26dcc787966d51bacd3f6705cc575e33bde2b9d59c04e09ab1fc913f9447bc471"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x0, 0xd10, "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"}]}], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x3, 0x0, 0x0, {[@window={0x3, 0x3, 0x2}, @nop, @sack_perm={0x4, 0x2}]}}, {"dfd05e89798952115d0c50cd77b9039442bca9396dc07352d0eece27425854ae0f592ed476096194af241dce4b4200801389a517446765d0037954cd8d4f5f999155eaca8927af57169d6b156a686330eb7aa2f39e919b5a656df08db750c1b9e6ca3d0127246bea7f367d247b5a187f30ed3517920edf1f88dc15171adaf472c5c948b1"}}}}}, 0xe80) 00:44:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1304.303803][ T8517] usb 3-1: new high-speed USB device number 112 using dummy_hcd 00:44:44 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1304.427567][T26956] can: request_module (can-proto-0) failed. [ 1304.487354][T26956] can: request_module (can-proto-0) failed. [ 1304.574438][ T8517] usb 3-1: Using ep0 maxpacket: 16 [ 1304.703999][ T8517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1304.717398][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1304.726686][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.924541][ T8517] usb 3-1: config 0 descriptor?? [ 1304.975157][ T8517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1305.167871][ T8517] usb 3-1: USB disconnect, device number 112 [ 1305.773346][ T8517] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1306.033886][ T8517] usb 3-1: Using ep0 maxpacket: 32 [ 1306.157509][ T8517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.168749][ T8517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.184756][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1306.194000][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.424837][ T8517] usb 3-1: config 0 descriptor?? [ 1306.465341][ T8517] hub 3-1:0.0: USB hub found [ 1306.773664][ T8517] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1306.788817][ T8517] usbhid 3-1:0.0: can't add hid device: -22 [ 1306.795182][ T8517] usbhid: probe of 3-1:0.0 failed with error -22 00:44:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:47 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1fb842, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 00:44:47 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:44:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 00:44:47 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1308.135878][ T8518] usb 3-1: USB disconnect, device number 113 00:44:48 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0xf0ff7f, 0x0) 00:44:48 executing program 4: pselect6(0x6e, &(0x7f0000000140)={0x0, 0xffffffffffffffe1}, 0x0, 0x0, &(0x7f0000000200), 0x0) 00:44:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1ff, 0x37}) dup(0xffffffffffffffff) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="e005ad000000030000bd0000000000000000941e6049cad2a5fab5d595f82311b9348564a925eb2b18cc0573effd919e0c8082c16d268e389f6aa7a5ad20bbd82ed76f93c1363b79b911fe95c9d29ed9b68f97c435e1499d345deb6a3b9dc4b831c6cb8ec0e3c16c426e9b9cecce5ebeb1b83281aee873be46cdf65e3672956db362a5e3e552b31de4ff5365ba99457133b774e4e0f444c544d5deeb228be6acefbbd0894dbe73cad35a3341f264d576a7c8c5fbe3745a6fa5991041e639bef82e11aa4f0c5f728d6d8f122e0c88573e8b9202794780ff07c865774837ba92f8180e7ea38da1d4ee5d58c668b098d21a1c3eaae15e282c", @ANYRES32, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x2604c081}, 0x40000000) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f0000008440)={0x10, 0x0, 0x0, 0x280080}, 0xc, &(0x7f0000009580)={&(0x7f00000084c0)={0x8c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x58, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xf51e}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x499}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xc, 0x8, {0x8, 0x9}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x4}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x200}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x1b, 0x6, "69b21a853e2a8bac534d87cb7b831e8bccba7327707a99"}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48011}, 0x40890) ptrace$setopts(0x4200, 0x0, 0x20, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x202000, 0x0) [ 1308.933617][ T8518] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1309.179585][ T8518] usb 3-1: Using ep0 maxpacket: 16 00:44:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x541) write$tun(r0, &(0x7f0000000040)={@void, @void, @ipv6=@tcp={0x0, 0x6, "1eedb6", 0x28, 0x6, 0x0, @private1, @remote, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"dfd05e89798952115d0c50cd77b9039442bca939"}}}}}, 0x50) 00:44:48 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) 00:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800010000000000000000000100c00e080001"], 0x1c}}, 0x0) [ 1309.325550][ T8518] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1309.343504][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1309.352659][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.482979][ T8518] usb 3-1: config 0 descriptor?? [ 1309.530531][ T8518] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1309.732115][ T8518] usb 3-1: USB disconnect, device number 114 [ 1310.323369][ T8518] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1310.564213][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 1310.703556][ T8518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.716145][ T8518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.726476][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1310.737564][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.755463][ T8518] usb 3-1: config 0 descriptor?? [ 1310.818463][ T8518] hub 3-1:0.0: USB hub found [ 1311.083472][ T8518] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1311.098429][ T8518] usbhid 3-1:0.0: can't add hid device: -22 [ 1311.104800][ T8518] usbhid: probe of 3-1:0.0 failed with error -22 00:44:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:51 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:44:51 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(0x0, 0x189900, 0x0) ftruncate(r0, 0x208200) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) futimesat(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) 00:44:51 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x2, 0x6, 0x0, 0x3f, {{0x6, 0x24, 0x6, 0x0, 0x0, "a6"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x0, 0x7f}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x26, &(0x7f00000000c0)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dfa5bcb29cca3d4a77b75720855411d4"}, @generic={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4}]}, 0x1, [{0x2, &(0x7f0000000100)=@string={0x2}}]}) 00:44:51 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:51 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}, @ptr]}}, 0x0, 0x112}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1312.262529][ T8517] usb 3-1: USB disconnect, device number 115 [ 1312.617708][ T8518] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1312.773560][ T8507] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1312.814608][ T8503] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1313.025117][ T8507] usb 1-1: Using ep0 maxpacket: 32 [ 1313.053437][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1313.157423][ T8518] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1313.166700][ T8518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.174947][ T8518] usb 5-1: Product: syz [ 1313.179202][ T8518] usb 5-1: Manufacturer: syz [ 1313.183999][ T8518] usb 5-1: SerialNumber: syz [ 1313.192929][ T8507] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1313.206384][ T8507] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1313.215267][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1313.228313][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1313.237592][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.271651][ T8507] usb 1-1: language id specifier not provided by device, defaulting to English [ 1313.287499][ T8518] usb 5-1: config 0 descriptor?? [ 1313.336750][ T8518] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1313.344004][ T8518] zr364xx 5-1:0.0: model 06d6:003b detected [ 1313.350132][ T8518] usb 5-1: 320x240 mode selected [ 1313.369051][ T8503] usb 3-1: config 0 descriptor?? [ 1313.426522][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1313.457427][ T8507] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1313.466784][ T8507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.475180][ T8507] usb 1-1: Product: syz [ 1313.480733][ T8507] usb 1-1: Manufacturer: syz [ 1313.485788][ T8507] usb 1-1: SerialNumber: syz [ 1313.618072][ T8503] usb 3-1: USB disconnect, device number 116 [ 1313.638281][T27058] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1313.770107][ T8518] usb 5-1: Zoran 364xx controlling device video71 [ 1313.826793][ T8518] usb 5-1: USB disconnect, device number 74 [ 1313.866463][ T8518] zr364xx 5-1:0.0: Zoran 364xx webcam unplugged [ 1313.975851][ T8507] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1314.080301][ T8507] usb 1-1: USB disconnect, device number 54 [ 1314.191077][ T8503] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1314.473854][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1314.523691][ T8518] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1314.594177][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.606728][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.617067][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1314.626340][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.723548][ T8507] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1314.897698][ T8503] usb 3-1: config 0 descriptor?? [ 1314.948584][ T8503] hub 3-1:0.0: USB hub found [ 1314.975059][ T8507] usb 1-1: Using ep0 maxpacket: 32 [ 1315.055658][ T8518] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1315.065094][ T8518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.073372][ T8518] usb 5-1: Product: syz [ 1315.077631][ T8518] usb 5-1: Manufacturer: syz [ 1315.082323][ T8518] usb 5-1: SerialNumber: syz [ 1315.124620][ T8507] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1315.137956][ T8507] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1315.189307][ T8507] usb 1-1: language id specifier not provided by device, defaulting to English [ 1315.234851][ T8503] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1315.249978][ T8503] usbhid 3-1:0.0: can't add hid device: -22 [ 1315.256376][ T8503] usbhid: probe of 3-1:0.0 failed with error -22 [ 1315.318022][ T8518] usb 5-1: config 0 descriptor?? [ 1315.365093][ T8507] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1315.374522][ T8507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.382612][ T8507] usb 1-1: Product: syz [ 1315.387372][ T8507] usb 1-1: Manufacturer: syz [ 1315.392060][ T8507] usb 1-1: SerialNumber: syz 00:44:55 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000100)=@string={0x2}}]}) [ 1315.587511][ T8518] usb 5-1: can't set config #0, error -71 [ 1315.603265][ T8518] usb 5-1: USB disconnect, device number 75 00:44:55 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:44:55 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:44:55 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) [ 1315.834565][ T8507] usb 1-1: can't set config #1, error -71 [ 1315.895136][ T8507] usb 1-1: USB disconnect, device number 55 00:44:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1316.290352][ T8858] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1316.305606][ T8518] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1316.447325][ T8507] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1316.458294][ T8503] usb 3-1: USB disconnect, device number 117 [ 1316.583286][ T8518] usb 6-1: Using ep0 maxpacket: 32 [ 1316.697483][ T8507] usb 1-1: Using ep0 maxpacket: 32 [ 1316.705080][ T8518] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1316.760125][ T8518] usb 6-1: language id specifier not provided by device, defaulting to English [ 1316.785927][ T8503] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1316.829890][ T8507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.841222][ T8507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.851385][ T8507] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1316.862714][ T8507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1316.872904][ T8507] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1316.878189][ T8858] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1316.895573][ T8858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.905614][ T8858] usb 5-1: Product: syz [ 1316.909871][ T8858] usb 5-1: Manufacturer: syz [ 1316.915367][ T8858] usb 5-1: SerialNumber: syz [ 1316.925023][ T8518] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1316.934332][ T8518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.942416][ T8518] usb 6-1: Product: syz [ 1316.946974][ T8518] usb 6-1: Manufacturer: syz [ 1316.951685][ T8518] usb 6-1: SerialNumber: syz [ 1316.952677][ T8858] usb 5-1: config 0 descriptor?? [ 1317.035390][ T8858] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1317.042537][ T8858] zr364xx 5-1:0.0: model 06d6:003b detected [ 1317.048740][ T8858] usb 5-1: 320x240 mode selected [ 1317.083394][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1317.148140][T27109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1317.164815][ T8507] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1317.174105][ T8507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.182188][ T8507] usb 1-1: Product: syz [ 1317.186614][ T8507] usb 1-1: Manufacturer: syz [ 1317.191296][ T8507] usb 1-1: SerialNumber: syz [ 1317.202469][ T8518] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1317.233380][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1317.246747][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1317.256366][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.356487][ T8503] usb 3-1: config 0 descriptor?? [ 1317.388881][T27115] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1317.401959][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1317.435838][ T8507] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1317.449746][ T8518] usb 6-1: USB disconnect, device number 20 [ 1317.585634][ T8858] usb 5-1: Zoran 364xx controlling device video71 [ 1317.600118][ T8507] usb 3-1: USB disconnect, device number 118 [ 1317.632938][ T8858] usb 5-1: USB disconnect, device number 76 [ 1317.643215][ C1] usb 5-1: error submitting urb (error=-19) [ 1317.649394][ T8503] usb 1-1: USB disconnect, device number 56 [ 1317.666377][ T8858] zr364xx 5-1:0.0: Zoran 364xx webcam unplugged [ 1318.203635][ T8517] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1318.224019][ T8507] usb 3-1: new high-speed USB device number 119 using dummy_hcd 00:44:58 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 1318.453550][ T8517] usb 6-1: Using ep0 maxpacket: 32 [ 1318.458969][T22103] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1318.465083][ T8507] usb 3-1: Using ep0 maxpacket: 32 [ 1318.575461][ T8517] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1318.615797][ T8507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.627165][ T8507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.637214][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1318.646530][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.713337][T22103] usb 1-1: Using ep0 maxpacket: 32 [ 1318.719778][ T8517] usb 6-1: language id specifier not provided by device, defaulting to English [ 1318.844876][T22103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.856105][T22103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.866162][T22103] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1318.876290][T22103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1318.886177][T22103] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1318.900727][ T8507] usb 3-1: config 0 descriptor?? [ 1318.915589][ T8517] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1318.925447][ T8517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.933671][ T8517] usb 6-1: Product: syz [ 1318.935034][ T8507] hub 3-1:0.0: USB hub found [ 1318.937924][ T8517] usb 6-1: Manufacturer: syz [ 1318.950866][ T8517] usb 6-1: SerialNumber: syz 00:44:58 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) [ 1319.206030][ T8517] usb 6-1: can't set config #1, error -71 [ 1319.234073][ T8507] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1319.239085][ T8517] usb 6-1: USB disconnect, device number 21 [ 1319.248583][ T8507] usbhid 3-1:0.0: can't add hid device: -22 00:44:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x3}}) [ 1319.255010][ T8507] usbhid: probe of 3-1:0.0 failed with error -22 [ 1319.344023][ T8858] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1319.384715][T22103] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1319.396874][T22103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.483745][T22103] usb 1-1: can't set config #1, error -71 [ 1319.509120][T22103] usb 1-1: USB disconnect, device number 57 [ 1319.854658][ T8517] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1319.916242][ T8858] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1319.926373][ T8858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.937036][ T8858] usb 5-1: Product: syz [ 1319.941292][ T8858] usb 5-1: Manufacturer: syz [ 1319.946119][ T8858] usb 5-1: SerialNumber: syz [ 1320.009670][ T8858] usb 5-1: config 0 descriptor?? [ 1320.069783][ T8858] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1320.077050][ T8858] zr364xx 5-1:0.0: model 06d6:003b detected [ 1320.083314][ T8858] usb 5-1: 320x240 mode selected [ 1320.163743][ T8517] usb 6-1: Using ep0 maxpacket: 32 [ 1320.308843][ T8517] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1320.498941][ T8505] usb 3-1: USB disconnect, device number 119 [ 1320.522552][ T8858] usb 5-1: Zoran 364xx controlling device video71 [ 1320.537516][ T8517] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1320.548670][ T8517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.560494][ T8517] usb 6-1: Product: syz [ 1320.568688][ T8517] usb 6-1: Manufacturer: syz [ 1320.574071][ T8517] usb 6-1: SerialNumber: syz [ 1320.600727][ T8858] usb 5-1: USB disconnect, device number 77 [ 1320.618189][ T8858] zr364xx 5-1:0.0: Zoran 364xx webcam unplugged [ 1320.630305][T27179] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1320.690891][ T8517] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1320.897268][ T8507] usb 6-1: USB disconnect, device number 22 [ 1321.703324][ T2087] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1321.957006][ T2087] usb 6-1: Using ep0 maxpacket: 32 [ 1322.075429][ T2087] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1322.335256][ T2087] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1322.344579][ T2087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.352667][ T2087] usb 6-1: Product: syz [ 1322.357116][ T2087] usb 6-1: Manufacturer: syz [ 1322.361837][ T2087] usb 6-1: SerialNumber: syz [ 1322.744093][ T2087] usb 6-1: can't set config #1, error -71 [ 1322.771931][ T2087] usb 6-1: USB disconnect, device number 23 00:45:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1025, 0x1}, 0x40) 00:45:03 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:45:03 executing program 0: set_mempolicy(0x1, &(0x7f0000000000)=0x4, 0x95e) 00:45:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:03 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:45:03 executing program 5: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 00:45:03 executing program 0: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={0x0}, 0x10) 00:45:03 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)) [ 1323.938286][ T8507] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1323.973157][ T2087] usb 5-1: new high-speed USB device number 78 using dummy_hcd 00:45:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000000)) [ 1324.183324][ T8507] usb 3-1: Using ep0 maxpacket: 16 [ 1324.307041][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1324.320203][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1324.329577][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:45:04 executing program 0: r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) [ 1324.466563][ T8507] usb 3-1: config 0 descriptor?? 00:45:04 executing program 5: socket$unix(0x1, 0x3, 0x0) [ 1324.514967][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1324.567785][ T2087] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1324.577390][ T2087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.585660][ T2087] usb 5-1: Product: syz [ 1324.589920][ T2087] usb 5-1: Manufacturer: syz [ 1324.594788][ T2087] usb 5-1: SerialNumber: syz 00:45:04 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000002b00)={0x18, 0x0, {0x4, @local, 'macvlan1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000002b00)={0x18, 0x0, {0x4, @local, 'macvlan1\x00'}}, 0x1e) [ 1324.700588][ T2087] usb 5-1: config 0 descriptor?? [ 1324.712946][ T8507] usb 3-1: USB disconnect, device number 120 [ 1324.759558][ T2087] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1324.767599][ T2087] zr364xx 5-1:0.0: model 06d6:003b detected [ 1324.773806][ T2087] usb 5-1: 320x240 mode selected 00:45:04 executing program 0: bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0xbeb69bd1c4a689b4) [ 1325.185189][ T2087] usb 5-1: Zoran 364xx controlling device video71 [ 1325.258202][ T2087] usb 5-1: USB disconnect, device number 78 [ 1325.277173][ T8507] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1325.277405][ C1] usb 5-1: error submitting urb (error=-19) [ 1325.295384][ T2087] zr364xx 5-1:0.0: Zoran 364xx webcam unplugged [ 1325.524755][ T8507] usb 3-1: Using ep0 maxpacket: 32 [ 1325.645233][ T8507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.659675][ T8507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.671147][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1325.680707][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.696862][ T8507] usb 3-1: config 0 descriptor?? [ 1325.736576][ T8507] hub 3-1:0.0: USB hub found [ 1326.055691][ T8507] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1326.070834][ T8507] usbhid 3-1:0.0: can't add hid device: -22 [ 1326.102257][ T8507] usbhid: probe of 3-1:0.0 failed with error -22 00:45:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:45:06 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) 00:45:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:06 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400000006241a000000090581030000000000090401"], 0x0) 00:45:06 executing program 0: setresuid(0x0, 0xee00, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) 00:45:06 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) 00:45:06 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000080)) [ 1327.344252][ T8507] usb 3-1: USB disconnect, device number 121 [ 1327.653187][ T2087] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1327.693263][ T8507] usb 5-1: new high-speed USB device number 79 using dummy_hcd 00:45:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0xe1ac) [ 1327.743341][ T8503] usb 3-1: new high-speed USB device number 122 using dummy_hcd 00:45:07 executing program 0: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2240, 0x0, 0x14}, 0x18) [ 1327.903201][ T2087] usb 2-1: Using ep0 maxpacket: 16 [ 1327.987628][ T8503] usb 3-1: Using ep0 maxpacket: 16 [ 1328.058229][ T2087] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.068625][ T2087] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.079808][ T2087] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:45:07 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) [ 1328.114122][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1328.128807][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1328.138964][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:45:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x541) write$tun(r0, &(0x7f0000000040)={@void, @void, @ipv6=@tcp={0x0, 0x6, "1eedb6", 0xf99, 0x6, 0x0, @private1, @remote, {[@fragment, @fragment, @fragment, @hopopts={0x0, 0x20, [], [@enc_lim, @pad1, @ra, @generic={0x0, 0xef, "464ff044abb5a2851436df99470c2b0422ef5909e27f2fc630d2b08a900483c518245fe613c88cf63cd5cf504504cf5683104af7c4e932abb2e081a8b0e77b1000de406c1b777ab4de39bb157cc2a3f6b6f79841d8cd015734f1ee37f0401ca96c7dfcfdf78b1557d5130726df8d21c742ab542005fa2f3ec6b49e38a9b35be4ef9ce0486a71ccf714831ee07180ab71951b389b22a748193d4353d4ed43c833fd961011bb9f1b233f893ec644eac04f81b5f15a435af14556252239debf5c57ccaca0b09e86353b8cf826e1fab8ed1654fb2a264ef6f508382cbd49b07062f753a9f7fd5398e01e89891eefcaa85d"}, @jumbo]}, @dstopts={0x0, 0x2, [], [@jumbo, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra, @padn]}, @hopopts={0x0, 0x1b5, [], [@generic={0x0, 0x84, "83cfd693e6fa4de154203fd037c555d3c091ac5c9fb3b6c7466c6a689d6bbef0663f9b3622740b68db73e42fa491cf019a4a1c56003e004e405806b722edbeb196aa59a78e60794b9a630ef9bdddc5c7015b90b552a27b70e7b0e5d27983d121f0ff9fe26dcc787966d51bacd3f6705cc575e33bde2b9d59c04e09ab1fc913f9447bc471"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x0, 0xd1a, "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"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}, {"dfd05e89798952115d0c50cd77b9039442bca9396dc07352d0eece27425854ae0f592ed476096194af241dce4b4200801389a517446765d0037954cd8d4f5f999155eaca8927af57169d6b156a686330eb7aa2f39e919b5a656df08db750c1b9e6ca3d0127246bea7f367d247b5a187f30ed3517920edf1f88dc15171adaf472c5"}}}}}, 0xfc1) [ 1328.243897][ T8507] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1328.253306][ T8507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.261393][ T8507] usb 5-1: Product: syz [ 1328.266086][ T8507] usb 5-1: Manufacturer: syz [ 1328.274192][ T8507] usb 5-1: SerialNumber: syz [ 1328.323921][ T8503] usb 3-1: config 0 descriptor?? [ 1328.334425][ T2087] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1328.343694][ T2087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.351768][ T2087] usb 2-1: Product: syz [ 1328.356288][ T2087] usb 2-1: Manufacturer: syz [ 1328.360968][ T2087] usb 2-1: SerialNumber: syz [ 1328.360999][ T8507] usb 5-1: config 0 descriptor?? [ 1328.369980][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1328.399350][ T8507] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1328.406667][ T8507] zr364xx 5-1:0.0: model 06d6:003b detected [ 1328.412765][ T8507] usb 5-1: 320x240 mode selected [ 1328.570650][ T8517] usb 3-1: USB disconnect, device number 122 [ 1328.610232][ T2087] cdc_ncm 2-1:1.0: bind() failure 00:45:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, 0x0, 0x4000008000dc) [ 1328.639880][ T8507] usb 5-1: Zoran 364xx controlling device video71 [ 1328.665223][ T8507] usb 5-1: USB disconnect, device number 79 [ 1328.705518][ T8507] zr364xx 5-1:0.0: Zoran 364xx webcam unplugged [ 1328.820816][ T2087] usb 2-1: USB disconnect, device number 17 [ 1329.179216][ T8517] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1329.442240][ T8517] usb 3-1: Using ep0 maxpacket: 32 [ 1329.583507][ T8517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.594783][ T8517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.603899][ T8507] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1329.604833][ T8517] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1329.621357][ T8517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.725208][ T8517] usb 3-1: config 0 descriptor?? [ 1329.768223][ T8517] hub 3-1:0.0: USB hub found 00:45:09 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:45:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) [ 1329.844453][ T8507] usb 2-1: Using ep0 maxpacket: 16 [ 1329.963820][ T8507] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.977697][ T8507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.988911][ T8507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.103474][ T8517] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1330.118869][ T8517] usbhid 3-1:0.0: can't add hid device: -22 [ 1330.125232][ T8517] usbhid: probe of 3-1:0.0 failed with error -22 [ 1330.264028][ T8507] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1330.274621][ T8507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.282711][ T8507] usb 2-1: Product: syz [ 1330.287739][ T8507] usb 2-1: Manufacturer: syz [ 1330.292434][ T8507] usb 2-1: SerialNumber: syz [ 1330.469900][ T8507] usb 2-1: can't set config #1, error -71 [ 1330.499213][ T8507] usb 2-1: USB disconnect, device number 18 00:45:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004000) 00:45:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) 00:45:11 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) 00:45:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1331.553811][ T8507] usb 3-1: USB disconnect, device number 123 00:45:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x58) 00:45:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000001700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1331.953767][ T8517] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1331.989932][T22103] usb 2-1: new high-speed USB device number 19 using dummy_hcd 00:45:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) [ 1332.143974][ T8507] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1332.234825][T22103] usb 2-1: Using ep0 maxpacket: 16 [ 1332.385327][T22103] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1332.396964][ T8507] usb 3-1: Using ep0 maxpacket: 16 [ 1332.398343][T22103] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1332.412895][T22103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.435664][T22103] usb 2-1: config 0 descriptor?? [ 1332.490404][T22103] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1332.527270][ T8507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1332.540309][ T8507] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1332.549618][ T8507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:45:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0xc0189436, 0x0) [ 1332.585176][ T8517] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1332.596046][ T8517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.604323][ T8517] usb 5-1: Product: syz [ 1332.608580][ T8517] usb 5-1: Manufacturer: syz [ 1332.614456][ T8517] usb 5-1: SerialNumber: syz 00:45:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) [ 1332.644204][ T8517] usb 5-1: config 0 descriptor?? [ 1332.662425][ T8507] usb 3-1: config 0 descriptor?? [ 1332.709772][ T8517] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1332.710389][ T8507] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1332.717332][ T8517] zr364xx 5-1:0.0: model 06d6:003b detected [ 1332.717467][ T8517] usb 5-1: 320x240 mode selected [ 1332.742459][ T2087] usb 2-1: USB disconnect, device number 19 [ 1332.912818][ T8503] usb 3-1: USB disconnect, device number 124 [ 1332.932424][T27427] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1332.955459][ T8517] usb 5-1: Zoran 364xx controlling device video71 [ 1332.955485][T27427] device netdevsim0 entered promiscuous mode [ 1332.955560][T27427] device macsec1 entered promiscuous mode [ 1332.972304][ T8517] usb 5-1: USB disconnect, device number 80 [ 1332.974215][ C1] usb 5-1: error submitting urb (error=-19) [ 1332.987830][ T8517] zr364xx 5-1:0.0: Zoran 364xx webcam unplugged [ 1333.155639][T27427] device netdevsim0 left promiscuous mode 00:45:12 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:45:12 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) [ 1333.315228][ T2087] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1333.503355][ T8503] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1333.573635][ T2087] usb 2-1: Using ep0 maxpacket: 32 [ 1333.724364][ T2087] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1333.741365][ T2087] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1333.743132][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1333.750700][ T2087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.826252][ T2087] usb 2-1: config 0 descriptor?? [ 1333.865376][ T2087] hub 2-1:0.0: bad descriptor, ignoring hub [ 1333.871505][ T2087] hub: probe of 2-1:0.0 failed with error -5 [ 1333.883939][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.884218][ T2087] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1333.895037][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.912298][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1333.921604][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.084912][ T8503] usb 3-1: config 0 descriptor?? [ 1334.142013][T27440] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1334.159018][T27440] device netdevsim0 entered promiscuous mode [ 1334.166816][T27440] device macsec1 entered promiscuous mode [ 1334.184926][ T8503] hub 3-1:0.0: USB hub found [ 1334.211014][T27440] device netdevsim0 left promiscuous mode [ 1334.426248][ T8503] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1334.445565][ T8503] usbhid 3-1:0.0: can't add hid device: -22 [ 1334.452847][ T8503] usbhid: probe of 3-1:0.0 failed with error -22 [ 1335.434568][ T2087] usb 2-1: USB disconnect, device number 20 00:45:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:15 executing program 4: 00:45:15 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:45:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) 00:45:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 00:45:15 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8d, {0x8d, 0x21, "e0f1b532f769fd67c9f3379c29ce51508924c7c29dc7e2eb723b1a19da8eaf50e5b7c62464155d97441d25d58abbd9efdd1cdf9644658de693c34dd94bcb3ed0a476da3368815a4c8e25479a9f2a4ee02a72a4e951c9646739e5db9e47ff7180b39e4e4a681991c64df9d1635d820d316461ccbb471f733da832e5d97cf3605872e9a2bb6f7d04531f1813"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x7, 0x0, "f6929ab7", '52^P'}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x8, 0xc0, 0x2, 0x0, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x800, 0x40}}, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "5ac4"}, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "3af2"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xcc}, 0x0}) [ 1335.683866][ T8505] usb 3-1: USB disconnect, device number 125 [ 1335.753838][T27487] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1335.798903][T27487] device netdevsim0 entered promiscuous mode [ 1335.806748][T27487] device macsec1 entered promiscuous mode [ 1335.876656][T27487] device netdevsim0 left promiscuous mode 00:45:15 executing program 4: 00:45:15 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/148) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/98) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/108) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x1000, 0x20000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000240)={0x0, 0x8001, 0x8, 0x7, 0x0, 0x6}) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000280)={0xf7, "b459a9f7e58e4675d9d1b9e4e2d6b911891451a0b3eda9344fe49932298cdff701c0997fab2a3918934a65c1099e10be58c666243bfdb45c545f0010d9cbc05a18e0937d1e00814b874f2f437a31af3cae8163bf01bb8c55bd3e73c8c1a09a7070c160769fc3f546d56ce4c238663b1da2b5068b2bd39c2810fe8a8d178effa32da4fd31b9fda53dc4d0708e7b627d1742674d2c38b2bcb8cdf0ec653557c0d6adff316022658c60e15f2918a0c47cec6ac29ef5760bb432775fd281a7048417382766288da674c4422ece58de6d554420972f2182a2b862fd1ddfd7a437ec8f6c5f0fd4fbf26dc9e0790b3b1e7ca4a9d6481348336ed0"}) r1 = syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000003c0)=""/63) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000400)=""/28) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000440)=""/182) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000500)=""/36) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000540)={0x55, 0x5, 0x3, {0x0, 0x1}, {0x3e2, 0x9c5d}, @const={0x1ff, {0xfff, 0x0, 0x400, 0x7}}}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000580)=""/112) r2 = syz_open_dev$hiddev(&(0x7f0000000600)='/dev/usb/hiddev#\x00', 0x37bd2cc5, 0x60400) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000640)={0x7, 0x6, 0x5}) r3 = syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x7a, 0xe0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0xd44a, 0xf3}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x80, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xa2, 0x1a}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0x3, 0x6}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x80, 0x4, 0x2, 0x20, 0x8}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3812}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "c2f8ea1ab7d2a56f456beac0b45728c451eca2e4bba87b2c2204734ce23e212cb96c3fc264a831ca44375ac79d4f29bb9b8decb175aa64674afa1485f06ab610c7bbc7a02332c0cfd75cf8f1d6844422b05eda52f0e006d6a6b56a3b8f63200614211ad85ebe846384ab0d701e51fed7b364fe841b50d84c8cc0849c3a17641cbeb8bafce8a06cc69468125d6be3d144c6ac4969cf0ad52568f7b84764cae0929400bdd49fefc25c3c0491510c68c2"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x40f}}, {0x82, &(0x7f0000000940)=@string={0x82, 0x3, "92acbc9c4283e7a94e3bdc4b63caecbe4c268c9316d992b838235a3b69739f62be052b53cb30e78b6c7ac5a44d5b9fb95f97e6264e4740530d4cda535b032889fe9a18ca2be4bb8741f490c98f3c8e2443d65e89503d148fd453c2bc34c00690bebea6b86f99903084208d03fcea43df3a0d19040fd42b0eee44f3d1a935d0bf"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000b40)={0x14, &(0x7f0000000a80)={0x40, 0x1, 0x5f, {0x5f, 0x3, "eb5a991aa46fd7dc0f065b6270d982d649e61c5997ff0219df47ef9c809fa993560ead18f09c54db1e5c6b0cd3bce40df12091e17ba69a0b7c2f3c154ca743d7497454e173664bac3d0a7059cab9f688ea08487a754d8c00524061aef1"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b80)={0x20, 0x14, 0x91, "4217f599b26f632e1d11084d668eb12baafa778a0e90fb24eee0a4b8d8b791970a9de11428154600163357b22b0fda09ef4774e73e1a1eb896f52520eade26860ccce0452c0fc3baf571558a5370d8bff292cf3e024eb8e2ef982d6cc496e06ba52c334bea2dde497fa4a2ed7a44682ca005c5d320d72b2b9e73d762f5112f1e4e4cfbd19d76afaf0a4e0a26e6c145c015"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x3, 0x101, 0x1, 0x8, 0x0, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xaca8, 0x3}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000d40)={0x20, 0x83, 0x2}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0x400}, &(0x7f0000000dc0)={0x20, 0x89, 0x2, 0x1}}) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000e80)={0xc4, "339c89b27e955945c3d66a3afed03c9dced87935ed86c84bdbc9c34a4e2e1ef13f638ae77a73cc69b58cee21a8c166bc72959a5b8ddf2693aa341487cbfe9c652b4c06384b82e0583f1b282d9799010e426b9f6dcb1590cd881e122696f4c06941ceac896518a5a03cbfb9ffdb707224de508d8753a17eab3eaace4145744fb80d7f8a786e33cae4fd0bbd88445970715b99d524f879d83808e923f112a6004857078bde2c3432f135c48324c51852365cdfa924df054a141c2b37cb2a3149b30da60250"}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000fc0)=""/74) [ 1336.138343][ T8503] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1336.383407][ T8503] usb 3-1: Using ep0 maxpacket: 16 00:45:16 executing program 4: 00:45:16 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b80101000000000904"], 0x0) [ 1336.504137][ T8503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1336.521521][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1336.531151][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.660303][ T8503] usb 3-1: config 0 descriptor?? [ 1336.767934][ T8503] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:45:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) 00:45:16 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 1336.873644][ T7] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1336.910342][ T8503] usb 3-1: USB disconnect, device number 126 [ 1337.114503][T27437] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1337.152623][T27524] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1337.169561][T27524] device netdevsim0 entered promiscuous mode [ 1337.175905][T27524] device macsec1 entered promiscuous mode [ 1337.209857][T27524] device netdevsim0 left promiscuous mode [ 1337.305470][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 1337.395345][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1337.406654][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1337.493926][ T8503] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1337.534845][T27437] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.546547][T27437] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1337.556367][T27437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.618625][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1337.628102][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.636563][ T7] usb 1-1: Product: ᫪튷澥歅샪垴쐨ꢻⱻТ䱳㻢Ⱑ油숿ꡤ쨱㝄읚依묩趛뇬ꩵ杤琢蔔櫰Ⴖ믇ꃇ㈣쿀峗蓖≄庰勚혆떦㭪掏ؠ℔빞掄ꮄ瀍儞퟾撳蓾倛䳘삌鲄᜺ᱤ뢾ﲺꃨ왬梔崒䓑곆楉૏◕䞸쩤鋠”풽峂м冑栌 [ 1337.664249][ T7] usb 1-1: Manufacturer: 㠒 [ 1337.669019][ T7] usb 1-1: SerialNumber: љ [ 1337.717212][T27437] usb 2-1: config 0 descriptor?? [ 1337.758120][T27437] legousbtower 2-1:0.0: interrupt endpoints not found [ 1337.793127][ T8503] usb 3-1: Using ep0 maxpacket: 32 [ 1337.914715][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.925953][ T8503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.936068][ T8503] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1337.945445][ T8503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.958417][ T8517] usb 2-1: USB disconnect, device number 21 [ 1337.959736][T27505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1337.997916][ T8503] usb 3-1: config 0 descriptor?? [ 1338.048258][ T8503] hub 3-1:0.0: USB hub found [ 1338.358220][ T8503] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1338.375600][ T8503] usbhid 3-1:0.0: can't add hid device: -22 [ 1338.381884][ T8503] usbhid: probe of 3-1:0.0 failed with error -22 [ 1338.465082][ T7] cdc_ncm 1-1:1.0: bind() failure [ 1338.485006][ T7] cdc_ncm 1-1:1.1: bind() failure [ 1338.517310][ T7] usb 1-1: USB disconnect, device number 58 [ 1338.743206][ T8517] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1339.154749][ T8517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.165253][ T8517] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1339.174715][ T8517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.195967][ T8517] usb 2-1: config 0 descriptor?? [ 1339.234177][ T8503] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1339.240450][ T8517] legousbtower 2-1:0.0: interrupt endpoints not found [ 1339.443767][ T8517] usb 2-1: USB disconnect, device number 22 00:45:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:19 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 00:45:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) 00:45:19 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1339.635672][ T8503] usb 1-1: not running at top speed; connect to a high speed hub [ 1339.637443][T22103] usb 3-1: USB disconnect, device number 127 00:45:19 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b80101000000000904"], 0x0) [ 1339.729465][ T8503] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1339.740597][ T8503] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1339.751343][T27579] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1339.767692][T27579] device netdevsim0 entered promiscuous mode [ 1339.773943][T27579] device macsec1 entered promiscuous mode [ 1339.888309][T27579] device netdevsim0 left promiscuous mode 00:45:19 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1340.153772][ T2087] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1340.193559][ T8503] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.202804][ T8503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.282940][ T8503] usb 1-1: can't set config #1, error -71 [ 1340.302024][ T8503] usb 1-1: USB disconnect, device number 59 [ 1340.313686][ T8858] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1340.413442][ T2087] usb 3-1: Using ep0 maxpacket: 16 00:45:20 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 1340.535342][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1340.548606][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1340.558248][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.607685][ T2087] usb 3-1: config 0 descriptor?? [ 1340.661579][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1340.694922][ T8858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.705423][ T8858] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1340.715264][ T8858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.763504][ T8503] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1340.831522][ T8858] usb 2-1: config 0 descriptor?? [ 1340.869895][ T2087] usb 3-1: USB disconnect, device number 2 [ 1340.905373][ T8858] legousbtower 2-1:0.0: interrupt endpoints not found 00:45:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) [ 1341.108706][T22103] usb 2-1: USB disconnect, device number 23 [ 1341.126878][ T8503] usb 1-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1341.140559][ T8503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.199384][ T8503] usb 1-1: config 0 descriptor?? [ 1341.271674][T27622] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1341.278346][ T8503] gspca_main: se401-2.14.0 probing 047d:5001 [ 1341.287425][T27622] device netdevsim0 entered promiscuous mode [ 1341.293775][T27622] device macsec1 entered promiscuous mode [ 1341.366540][T27622] device netdevsim0 left promiscuous mode [ 1341.513708][ T2087] usb 3-1: new high-speed USB device number 3 using dummy_hcd 00:45:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x0, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) [ 1341.704407][ T8503] gspca_se401: Wrong descriptor type [ 1341.753256][ T2087] usb 3-1: Using ep0 maxpacket: 32 00:45:21 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b80101000000000904"], 0x0) [ 1341.894126][ T2087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.905265][ T2087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.908279][ T8503] usb 1-1: USB disconnect, device number 60 [ 1341.915256][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1341.915376][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.119444][ T2087] usb 3-1: config 0 descriptor?? [ 1342.165551][ T2087] hub 3-1:0.0: USB hub found 00:45:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') [ 1342.233696][ T7] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1342.436310][T27646] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1342.453344][T27646] device netdevsim0 entered promiscuous mode [ 1342.461085][T27646] device macsec1 entered promiscuous mode [ 1342.474736][ T2087] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1342.489805][ T2087] usbhid 3-1:0.0: can't add hid device: -22 [ 1342.496367][ T2087] usbhid: probe of 3-1:0.0 failed with error -22 [ 1342.505220][T22103] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1342.543321][ T7] usb 5-1: device descriptor read/64, error 18 [ 1342.564270][T27646] device netdevsim0 left promiscuous mode [ 1342.684647][ T8503] usb 1-1: new high-speed USB device number 61 using dummy_hcd 00:45:22 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1342.904629][T22103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.915256][T22103] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1342.924571][T22103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.933330][ T7] usb 5-1: device descriptor read/64, error 18 [ 1343.019642][T22103] usb 2-1: config 0 descriptor?? [ 1343.055193][ T8503] usb 1-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1343.064584][ T8503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.079012][T22103] legousbtower 2-1:0.0: interrupt endpoints not found [ 1343.132948][ T8503] usb 1-1: config 0 descriptor?? [ 1343.185589][ T8503] gspca_main: se401-2.14.0 probing 047d:5001 [ 1343.226230][ T7] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1343.303981][T22103] usb 2-1: USB disconnect, device number 24 [ 1343.523806][ T7] usb 5-1: device descriptor read/64, error 18 00:45:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:23 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x7, 0x4440) read$hidraw(r1, &(0x7f0000000440)=""/153, 0x99) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000140)) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x1, 0x79b978eee75cd0fe) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000580)={0x35, "d81128239a8a01e8010000000000640527d135a535ce90e1d797901431de3e85da3eca1155a876c8498a873e56272300"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="0014a50000000b"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="00000801000001598c949422684d5dd74c801c689352f04e8bcf666a45bdbe736034e81b76c64d6d71f155afa42d5f6c7b82a4db258a0ccb3418590ceb5844fdc73531296bc07b48579ab9b4b90c31279833cbaf5dc2448d102ad3d8976ccf9e8b824299938be4911d2edf8b5c05dcdd38e32a5e6442a6cc604d58420aa534632563c655"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="0015a50000000b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) [ 1343.805660][ T8518] usb 3-1: USB disconnect, device number 3 [ 1343.822831][T27674] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1343.839411][T27674] device netdevsim0 entered promiscuous mode [ 1343.845681][T27674] device macsec1 entered promiscuous mode [ 1343.885302][T27674] device netdevsim0 left promiscuous mode [ 1343.956544][ T7] usb 5-1: device descriptor read/64, error 18 00:45:23 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b80101000000000904"], 0x0) [ 1344.081424][ T7] usb usb5-port1: attempt power cycle [ 1344.156681][ T8503] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 1344.194791][ T2087] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1344.405119][ T8503] usb 1-1: Using ep0 maxpacket: 8 [ 1344.444242][ T8503] usb 1-1: device firmware changed [ 1344.464393][ T8503] gspca_se401: read req failed req 0x06 error -19 [ 1344.467437][ T2087] usb 3-1: Using ep0 maxpacket: 16 [ 1344.566872][ T8503] usb 1-1: USB disconnect, device number 61 [ 1344.594030][T22103] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1344.611235][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1344.626734][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1344.636175][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:45:24 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) [ 1344.698035][ T2087] usb 3-1: config 0 descriptor?? [ 1344.762919][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1344.779950][ T8503] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1344.803650][ T7] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1344.880368][T27702] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1344.898286][T27702] device netdevsim0 entered promiscuous mode [ 1344.904526][T27702] device macsec1 entered promiscuous mode [ 1344.922394][T27702] device netdevsim0 left promiscuous mode 00:45:24 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x0, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) [ 1344.962733][ T3720] usb 3-1: USB disconnect, device number 4 [ 1345.023551][ T7] usb 5-1: device descriptor read/8, error -71 [ 1345.030135][ T8503] usb 1-1: Using ep0 maxpacket: 8 [ 1345.064115][T22103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.074668][T22103] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1345.083977][T22103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.157229][ T8503] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1345.168538][ T8503] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1345.178754][ T8503] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1345.189299][ T8503] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1345.197449][T22103] usb 2-1: config 0 descriptor?? [ 1345.283395][ T7] usb 5-1: device descriptor read/8, error -71 [ 1345.386320][T22103] legousbtower 2-1:0.0: interrupt endpoints not found [ 1345.492870][T27437] usb 2-1: USB disconnect, device number 25 [ 1345.564788][ T8503] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1345.574142][ T8503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1345.582229][ T8503] usb 1-1: SerialNumber: syz [ 1345.603587][ T3720] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1345.676437][T27675] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1345.760476][T27675] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1345.793361][ T7] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1345.817744][ T8503] hub 1-1:1.0: bad descriptor, ignoring hub [ 1345.824152][ T8503] hub: probe of 1-1:1.0 failed with error -5 [ 1345.844339][ T3720] usb 3-1: Using ep0 maxpacket: 32 [ 1345.925621][ T7] usb 5-1: Invalid ep0 maxpacket: 0 [ 1345.932199][ T7] usb usb5-port1: unable to enumerate USB device [ 1345.964163][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.975381][ T3720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.985482][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1345.994750][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.022951][T27675] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1346.083718][T27675] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1346.254752][ T3720] usb 3-1: config 0 descriptor?? 00:45:25 executing program 1: [ 1346.295281][ T3720] hub 3-1:0.0: USB hub found 00:45:26 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1346.431454][ T8503] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1346.504072][ T3720] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1346.519308][ T3720] usbhid 3-1:0.0: can't add hid device: -22 [ 1346.530342][ T3720] usbhid: probe of 3-1:0.0 failed with error -22 00:45:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) [ 1346.743945][T22103] usb 1-1: USB disconnect, device number 62 [ 1346.760633][T22103] usblp0: removed 00:45:26 executing program 1: [ 1347.169112][T22103] usb 1-1: new high-speed USB device number 63 using dummy_hcd 00:45:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) 00:45:26 executing program 1: [ 1347.436712][T22103] usb 1-1: Using ep0 maxpacket: 8 [ 1347.565055][T22103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1347.578353][T22103] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1347.588887][T22103] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1347.599019][T22103] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 00:45:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:27 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x7, 0x4440) read$hidraw(r1, &(0x7f0000000440)=""/153, 0x99) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000140)) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x1, 0x79b978eee75cd0fe) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000580)={0x35, "d81128239a8a01e8010000000000640527d135a535ce90e1d797901431de3e85da3eca1155a876c8498a873e56272300"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="0014a50000000b"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="00000801000001598c949422684d5dd74c801c689352f04e8bcf666a45bdbe736034e81b76c64d6d71f155afa42d5f6c7b82a4db258a0ccb3418590ceb5844fdc73531296bc07b48579ab9b4b90c31279833cbaf5dc2448d102ad3d8976ccf9e8b824299938be4911d2edf8b5c05dcdd38e32a5e6442a6cc604d58420aa534632563c655"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="0015a50000000b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) 00:45:27 executing program 1: syz_usb_connect(0x0, 0x1ca, 0x0, 0x0) [ 1348.073343][T22103] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1348.082677][T22103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1348.124057][ T8517] usb 3-1: USB disconnect, device number 5 [ 1348.246708][T22103] usb 1-1: can't set config #1, error -71 [ 1348.258551][T22103] usb 1-1: USB disconnect, device number 63 00:45:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) 00:45:28 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x0, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x57, 0x94, 0x81, 0x0, [], [{{0x9, 0x5, 0x8d, 0x2, 0x200}}]}}]}}]}}, 0x0) [ 1348.623221][ T3720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1348.689201][T27781] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1348.707950][T27781] device netdevsim0 entered promiscuous mode [ 1348.714165][T27781] device macsec1 entered promiscuous mode [ 1348.783723][T22103] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1348.859176][T27781] device netdevsim0 left promiscuous mode [ 1348.869759][ T3720] usb 3-1: Using ep0 maxpacket: 16 00:45:28 executing program 1: syz_usb_connect(0x0, 0x1ca, 0x0, 0x0) [ 1348.994190][ T3720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1349.007248][ T3720] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1349.017788][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.043342][T22103] usb 1-1: Using ep0 maxpacket: 8 [ 1349.164691][T22103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1349.174173][ T3720] usb 3-1: config 0 descriptor?? [ 1349.175877][T22103] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1349.190829][T22103] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1349.200982][T22103] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1349.222496][ T3720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1349.353555][ T7] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1349.470789][T22103] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1349.480140][T22103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1349.488572][T22103] usb 1-1: SerialNumber: syz [ 1349.576340][T27776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1349.594481][T27776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1349.623612][ T7] usb 5-1: device descriptor read/64, error 18 [ 1349.627494][T22103] hub 1-1:1.0: bad descriptor, ignoring hub [ 1349.636164][T22103] hub: probe of 1-1:1.0 failed with error -5 [ 1349.785784][T27437] usb 3-1: USB disconnect, device number 6 [ 1349.855433][T27776] raw-gadget gadget: fail, usb_ep_enable returned -22 00:45:29 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1349.908908][T27776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1350.013771][ T7] usb 5-1: device descriptor read/64, error 18 00:45:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) 00:45:29 executing program 1: syz_usb_connect(0x0, 0x1ca, 0x0, 0x0) [ 1350.189876][T27437] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1350.207232][T22103] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1350.283881][ T7] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1350.433277][T27437] usb 3-1: Using ep0 maxpacket: 32 [ 1350.467200][T27812] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1350.483963][T27812] device netdevsim0 entered promiscuous mode [ 1350.494826][T27812] device macsec1 entered promiscuous mode [ 1350.577689][ T7] usb 5-1: device descriptor read/64, error 18 [ 1350.584724][T27437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.599549][T27437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.609797][T27437] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1350.619107][T27437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.633778][T27691] usb 1-1: USB disconnect, device number 64 [ 1350.654186][T27691] usblp0: removed [ 1350.699888][T27812] device netdevsim0 left promiscuous mode [ 1350.792720][T27437] usb 3-1: config 0 descriptor?? [ 1350.836979][T27437] hub 3-1:0.0: USB hub found [ 1350.973627][ T7] usb 5-1: device descriptor read/64, error 18 [ 1350.984403][T27691] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1351.061273][T27437] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1351.076603][T27437] usbhid 3-1:0.0: can't add hid device: -22 [ 1351.082864][T27437] usbhid: probe of 3-1:0.0 failed with error -22 [ 1351.093723][ T7] usb usb5-port1: attempt power cycle [ 1351.223534][T27691] usb 1-1: Using ep0 maxpacket: 8 00:45:30 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[], 0x0) [ 1351.345987][T27691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1351.357299][T27691] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1351.368898][T27691] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1351.379227][T27691] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1351.524826][T27691] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1351.534775][T27691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1351.542867][T27691] usb 1-1: SerialNumber: syz 00:45:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) [ 1351.608874][T27776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1351.637475][T27776] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1351.705919][T27691] hub 1-1:1.0: bad descriptor, ignoring hub [ 1351.712043][T27691] hub: probe of 1-1:1.0 failed with error -5 [ 1351.803311][ T7] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1351.835919][T27842] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1351.852705][T27842] device netdevsim0 entered promiscuous mode [ 1351.859190][T27842] device macsec1 entered promiscuous mode [ 1351.911061][ T7] usb 5-1: Invalid ep0 maxpacket: 0 [ 1351.952302][T27842] device netdevsim0 left promiscuous mode [ 1351.993364][T27691] usblp: can't set desired altsetting 0 on interface 0 [ 1352.014010][ T8503] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1352.074184][ T7] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1352.136530][T27691] usb 1-1: USB disconnect, device number 65 [ 1352.283462][ T8503] usb 2-1: device descriptor read/64, error 18 [ 1352.353663][ T7] usb 5-1: device descriptor read/8, error -71 00:45:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 00:45:32 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x94, 0x81}}]}}]}}, 0x0) [ 1352.563461][ T7] usb 5-1: device descriptor read/8, error -71 [ 1352.673400][ T8503] usb 2-1: device descriptor read/64, error 18 [ 1352.683671][ T7] usb usb5-port1: unable to enumerate USB device [ 1352.945666][ T8503] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1352.995192][T27830] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 1353.057693][ T7] usb 5-1: new high-speed USB device number 89 using dummy_hcd 00:45:32 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) [ 1353.105066][ T8507] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1353.243290][T27830] usb 3-1: Using ep0 maxpacket: 16 [ 1353.248931][ T8503] usb 2-1: device descriptor read/64, error 18 [ 1353.284127][T27830] usb 3-1: device firmware changed [ 1353.294582][T27830] usb 3-1: USB disconnect, device number 7 00:45:33 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1353.341235][T27869] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1353.357867][T27869] device netdevsim0 entered promiscuous mode [ 1353.364096][T27869] device macsec1 entered promiscuous mode [ 1353.428953][T27869] device netdevsim0 left promiscuous mode [ 1353.496089][ T8507] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1353.505069][ T8507] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.516968][ T8507] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1353.526569][ T8507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.634923][ T7] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1353.644313][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.652466][ T7] usb 5-1: Product: syz [ 1353.657001][ T7] usb 5-1: Manufacturer: syz [ 1353.661768][ T7] usb 5-1: SerialNumber: syz [ 1353.698163][ T8503] usb 2-1: device descriptor read/64, error 18 [ 1353.743157][T27830] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1353.768592][ T7] usb 5-1: config 0 descriptor?? [ 1353.799783][ T8507] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1353.809337][ T8507] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1353.817749][ T8507] usb 1-1: Product: syz [ 1353.822015][ T8507] usb 1-1: Manufacturer: syz [ 1353.831832][ T8503] usb usb2-port1: attempt power cycle [ 1353.851670][ T7] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1353.861937][ T7] zr364xx 5-1:0.0: model 06d6:003b detected [ 1353.868300][ T7] usb 5-1: 320x240 mode selected [ 1353.873564][ T7] zr364xx 5-1:0.0: Could not find bulk-in endpoint [ 1353.880558][ T7] zr364xx: probe of 5-1:0.0 failed with error -12 [ 1353.969082][ T8507] cdc_wdm 1-1:1.0: skipping garbage [ 1353.974714][ T8507] cdc_wdm 1-1:1.0: skipping garbage [ 1354.007427][ T8507] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1354.026047][T27830] usb 3-1: Using ep0 maxpacket: 16 [ 1354.065018][ T7] usb 5-1: USB disconnect, device number 89 [ 1354.156751][T27830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1354.169996][T27830] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1354.179511][T27830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.239802][T27830] usb 3-1: config 0 descriptor?? [ 1354.355734][T27830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:45:34 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) [ 1354.547801][ T2087] usb 3-1: USB disconnect, device number 8 [ 1354.569575][ T8503] usb 2-1: new high-speed USB device number 28 using dummy_hcd 00:45:34 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x94, 0x81}}]}}]}}, 0x0) 00:45:34 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[], 0x0) [ 1354.848132][T27907] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1354.864920][T27907] device netdevsim0 entered promiscuous mode [ 1354.871034][T27907] device macsec1 entered promiscuous mode [ 1354.881339][ T8503] usb 2-1: device descriptor read/8, error -71 [ 1355.000085][T27907] device netdevsim0 left promiscuous mode [ 1355.093676][ T8503] usb 2-1: device descriptor read/8, error -71 [ 1355.156593][ T2087] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1355.263637][T27830] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1355.424180][ T2087] usb 3-1: Using ep0 maxpacket: 32 [ 1355.566374][ T2087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.577690][ T2087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.584718][ T8503] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1355.587697][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1355.604472][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.704006][ T2087] usb 3-1: config 0 descriptor?? [ 1355.745970][ T2087] hub 3-1:0.0: USB hub found [ 1355.781009][ T8503] usb 2-1: device descriptor read/8, error -61 [ 1355.787730][T27830] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1355.797327][T27830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.805515][T27830] usb 5-1: Product: syz [ 1355.809766][T27830] usb 5-1: Manufacturer: syz [ 1355.818215][T27830] usb 5-1: SerialNumber: syz [ 1355.835607][T27830] usb 5-1: config 0 descriptor?? [ 1355.881477][T27830] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1355.889003][T27830] zr364xx 5-1:0.0: model 06d6:003b detected [ 1355.895539][T27830] usb 5-1: 320x240 mode selected [ 1355.900579][T27830] zr364xx 5-1:0.0: Could not find bulk-in endpoint [ 1355.907575][T27830] zr364xx: probe of 5-1:0.0 failed with error -12 00:45:35 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) [ 1356.057590][T27830] usb 1-1: USB disconnect, device number 66 [ 1356.074365][ T8503] usb 2-1: device descriptor read/8, error -61 00:45:35 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) 00:45:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1356.103336][ T3720] usb 5-1: USB disconnect, device number 90 [ 1356.154268][ T2087] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1356.169177][ T2087] usbhid 3-1:0.0: can't add hid device: -22 [ 1356.175522][ T2087] usbhid: probe of 3-1:0.0 failed with error -22 [ 1356.204927][ T8503] usb usb2-port1: unable to enumerate USB device [ 1356.289800][ T2087] usb 3-1: USB disconnect, device number 9 [ 1356.369369][T27946] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1356.388492][T27946] device netdevsim0 entered promiscuous mode [ 1356.394734][T27946] device macsec1 entered promiscuous mode [ 1356.471687][T27946] device netdevsim0 left promiscuous mode 00:45:36 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xec, 0x8f, 0xa9, 0x40, 0x6d6, 0x3b, 0x2035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x94, 0x81}}]}}]}}, 0x0) [ 1356.824943][ T2087] usb 3-1: new high-speed USB device number 10 using dummy_hcd 00:45:36 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "1d"}]}}, 0x0, 0x106}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1357.083484][ T2087] usb 3-1: Using ep0 maxpacket: 16 00:45:36 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0d3a0408c0701101a7a100203010902240001000000000904000001f5925b0009210000000122810009050c"], 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="d0eafe00000000003605ce8efbda66b12b3c35dd924690823882fe6f5a0454b5b29d8f70b9d06cb970bbb4f649e0044384b863aa02f29ac886abaeaf344ee4032e073b6ad81bca384d1ad5bf82"], 0x0}, 0x0) [ 1357.233948][ T2087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1357.247101][ T2087] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1357.256449][ T2087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.390602][ T2087] usb 3-1: config 0 descriptor?? [ 1357.393601][ T8507] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1357.446899][ T2087] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:45:37 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00ee8005000700010000000a000540430000000000000008000a0009d35b"], 0x50}}, 0x0) [ 1357.615453][ T8503] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1357.647545][T27830] usb 3-1: USB disconnect, device number 10 [ 1357.786788][T27977] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1357.803751][T27977] device netdevsim0 entered promiscuous mode [ 1357.809876][T27977] device macsec1 entered promiscuous mode [ 1357.840182][T27977] device netdevsim0 left promiscuous mode [ 1357.967050][ T8507] usb 5-1: New USB device found, idVendor=06d6, idProduct=003b, bcdDevice=20.35 [ 1357.977351][ T8507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.987270][ T8507] usb 5-1: Product: syz [ 1357.991523][ T8507] usb 5-1: Manufacturer: syz [ 1357.996398][ T8507] usb 5-1: SerialNumber: syz [ 1358.033781][ T8503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1358.136266][ T8507] usb 5-1: config 0 descriptor?? 00:45:37 executing program 1: syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)=ANY=[], 0x0) [ 1358.179814][ T8507] zr364xx 5-1:0.0: Zoran 364xx compatible webcam plugged [ 1358.187242][ T8507] zr364xx 5-1:0.0: model 06d6:003b detected [ 1358.193436][ T8507] usb 5-1: 320x240 mode selected [ 1358.198476][ T8507] zr364xx 5-1:0.0: Could not find bulk-in endpoint [ 1358.205528][ T8507] zr364xx: probe of 5-1:0.0 failed with error -12 [ 1358.224858][ T8503] usb 1-1: New USB device found, idVendor=078c, idProduct=1001, bcdDevice=7a.1a [ 1358.235507][ T8503] usb 1-1: New USB device strings: Mfr=16, Product=2, SerialNumber=3 [ 1358.244101][ T8503] usb 1-1: Product: syz [ 1358.248362][ T8503] usb 1-1: Manufacturer: syz [ 1358.253218][ T8503] usb 1-1: SerialNumber: syz [ 1358.283662][T27830] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1358.363350][ T8503] usb 1-1: config 0 descriptor?? [ 1358.425652][ T8505] usb 5-1: USB disconnect, device number 91 [ 1358.525716][T27830] usb 3-1: Using ep0 maxpacket: 32 [ 1358.626047][ T8503] ===================================================== [ 1358.633020][ T8503] BUG: KMSAN: uninit-value in gtco_probe+0x1d62/0x3930 [ 1358.635025][ T8503] CPU: 0 PID: 8503 Comm: kworker/0:0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1358.635025][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.635025][ T8503] Workqueue: usb_hub_wq hub_event [ 1358.635025][ T8503] Call Trace: [ 1358.635025][ T8503] dump_stack+0x21c/0x280 [ 1358.635025][ T8503] kmsan_report+0xf7/0x1e0 [ 1358.635025][ T8503] __msan_warning+0x5f/0xa0 [ 1358.635025][ T8503] gtco_probe+0x1d62/0x3930 [ 1358.635025][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.635025][ T8503] ? store_tabletExecute+0x150/0x150 [ 1358.635025][ T8503] usb_probe_interface+0xfcc/0x1520 [ 1358.635025][ T8503] ? usb_register_driver+0x900/0x900 [ 1358.635025][ T8503] really_probe+0xebd/0x2420 [ 1358.635025][ T8503] driver_probe_device+0x293/0x390 [ 1358.635025][ T8503] __device_attach_driver+0x63f/0x830 [ 1358.635025][ T8503] bus_for_each_drv+0x2ca/0x3f0 [ 1358.635025][ T8503] ? state_synced_show+0x130/0x130 [ 1358.635025][ T8503] __device_attach+0x538/0x860 [ 1358.635025][ T8503] device_initial_probe+0x4a/0x60 [ 1358.635025][ T8503] bus_probe_device+0x177/0x3d0 [ 1358.635025][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.635025][ T8503] device_add+0x399e/0x3f20 [ 1358.635025][ T8503] usb_set_configuration+0x39cf/0x4010 [ 1358.635025][ T8503] ? usb_set_configuration+0xa61/0x4010 [ 1358.635025][ T8503] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 1358.635025][ T8503] usb_generic_driver_probe+0x138/0x300 [ 1358.635025][ T8503] ? usb_choose_configuration+0xf00/0xf00 [ 1358.635025][ T8503] usb_probe_device+0x317/0x570 [ 1358.635025][ T8503] ? usb_register_device_driver+0x590/0x590 [ 1358.635025][ T8503] really_probe+0xebd/0x2420 [ 1358.635025][ T8503] driver_probe_device+0x293/0x390 [ 1358.635025][ T8503] __device_attach_driver+0x63f/0x830 [ 1358.635025][ T8503] bus_for_each_drv+0x2ca/0x3f0 [ 1358.635025][ T8503] ? state_synced_show+0x130/0x130 [ 1358.635025][ T8503] __device_attach+0x538/0x860 [ 1358.635025][ T8503] device_initial_probe+0x4a/0x60 [ 1358.635025][ T8503] bus_probe_device+0x177/0x3d0 [ 1358.635025][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.635025][ T8503] device_add+0x399e/0x3f20 [ 1358.635025][ T8503] usb_new_device+0x1bd6/0x2a30 [ 1358.635025][ T8503] hub_event+0x5bc9/0x8890 [ 1358.635025][ T8503] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1358.635025][ T8503] ? kmsan_get_metadata+0x116/0x180 [ 1358.635025][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.635025][ T8503] ? led_work+0x780/0x780 [ 1358.635025][ T8503] process_one_work+0x121c/0x1fc0 [ 1358.635025][ T8503] worker_thread+0x10cc/0x2740 [ 1358.635025][ T8503] ? kmsan_get_metadata+0x116/0x180 [ 1358.635025][ T8503] kthread+0x51c/0x560 [ 1358.635025][ T8503] ? process_one_work+0x1fc0/0x1fc0 [ 1358.635025][ T8503] ? kthread_blkcg+0x110/0x110 [ 1358.635025][ T8503] ret_from_fork+0x1f/0x30 [ 1358.635025][ T8503] [ 1358.635025][ T8503] Uninit was stored to memory at: [ 1358.916894][ T8503] kmsan_internal_chain_origin+0xad/0x130 [ 1358.916900][ T8503] __msan_chain_origin+0x57/0xa0 [ 1358.916900][ T8503] gtco_probe+0x1f5d/0x3930 [ 1358.916900][ T8503] usb_probe_interface+0xfcc/0x1520 [ 1358.916900][ T8503] really_probe+0xebd/0x2420 [ 1358.916900][ T8503] driver_probe_device+0x293/0x390 [ 1358.916900][ T8503] __device_attach_driver+0x63f/0x830 [ 1358.916900][ T8503] bus_for_each_drv+0x2ca/0x3f0 [ 1358.916900][ T8503] __device_attach+0x538/0x860 [ 1358.916900][ T8503] device_initial_probe+0x4a/0x60 [ 1358.916900][ T8503] bus_probe_device+0x177/0x3d0 [ 1358.916900][ T8503] device_add+0x399e/0x3f20 [ 1358.916900][ T8503] usb_set_configuration+0x39cf/0x4010 [ 1358.916900][ T8503] usb_generic_driver_probe+0x138/0x300 [ 1358.916900][ T8503] usb_probe_device+0x317/0x570 [ 1358.916900][ T8503] really_probe+0xebd/0x2420 [ 1358.916900][ T8503] driver_probe_device+0x293/0x390 [ 1358.916900][ T8503] __device_attach_driver+0x63f/0x830 [ 1358.916900][ T8503] bus_for_each_drv+0x2ca/0x3f0 [ 1358.916900][ T8503] __device_attach+0x538/0x860 [ 1358.916900][ T8503] device_initial_probe+0x4a/0x60 [ 1358.916900][ T8503] bus_probe_device+0x177/0x3d0 [ 1358.916900][ T8503] device_add+0x399e/0x3f20 [ 1358.916900][ T8503] usb_new_device+0x1bd6/0x2a30 [ 1358.916900][ T8503] hub_event+0x5bc9/0x8890 [ 1358.916900][ T8503] process_one_work+0x121c/0x1fc0 [ 1358.916900][ T8503] worker_thread+0x10cc/0x2740 [ 1358.916900][ T8503] kthread+0x51c/0x560 [ 1358.916900][ T8503] ret_from_fork+0x1f/0x30 [ 1358.916900][ T8503] [ 1358.916900][ T8503] Local variable ----globalval.i@gtco_probe created at: [ 1358.916900][ T8503] gtco_probe+0xee8/0x3930 [ 1358.916900][ T8503] gtco_probe+0xee8/0x3930 [ 1358.916900][ T8503] ===================================================== [ 1358.916900][ T8503] Disabling lock debugging due to kernel taint [ 1358.916900][ T8503] Kernel panic - not syncing: panic_on_warn set ... [ 1358.916900][ T8503] CPU: 0 PID: 8503 Comm: kworker/0:0 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 1358.916900][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.916900][ T8503] Workqueue: usb_hub_wq hub_event [ 1358.916900][ T8503] Call Trace: [ 1358.916900][ T8503] dump_stack+0x21c/0x280 [ 1358.916900][ T8503] panic+0x4c8/0xea7 [ 1358.916900][ T8503] ? add_taint+0x17c/0x210 [ 1358.916900][ T8503] kmsan_report+0x1da/0x1e0 [ 1358.916900][ T8503] __msan_warning+0x5f/0xa0 [ 1358.916900][ T8503] gtco_probe+0x1d62/0x3930 [ 1358.916900][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.916900][ T8503] ? store_tabletExecute+0x150/0x150 [ 1358.916900][ T8503] usb_probe_interface+0xfcc/0x1520 [ 1358.916900][ T8503] ? usb_register_driver+0x900/0x900 [ 1358.916900][ T8503] really_probe+0xebd/0x2420 [ 1358.916900][ T8503] driver_probe_device+0x293/0x390 [ 1358.916900][ T8503] __device_attach_driver+0x63f/0x830 [ 1358.916900][ T8503] bus_for_each_drv+0x2ca/0x3f0 [ 1358.916900][ T8503] ? state_synced_show+0x130/0x130 [ 1358.916900][ T8503] __device_attach+0x538/0x860 [ 1358.916900][ T8503] device_initial_probe+0x4a/0x60 [ 1358.916900][ T8503] bus_probe_device+0x177/0x3d0 [ 1358.916900][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.916900][ T8503] device_add+0x399e/0x3f20 [ 1358.916900][ T8503] usb_set_configuration+0x39cf/0x4010 [ 1358.916900][ T8503] ? usb_set_configuration+0xa61/0x4010 [ 1358.916900][ T8503] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 1358.916900][ T8503] usb_generic_driver_probe+0x138/0x300 [ 1358.916900][ T8503] ? usb_choose_configuration+0xf00/0xf00 [ 1358.916900][ T8503] usb_probe_device+0x317/0x570 [ 1358.916900][ T8503] ? usb_register_device_driver+0x590/0x590 [ 1358.916900][ T8503] really_probe+0xebd/0x2420 [ 1358.916900][ T8503] driver_probe_device+0x293/0x390 [ 1358.916900][ T8503] __device_attach_driver+0x63f/0x830 [ 1358.916900][ T8503] bus_for_each_drv+0x2ca/0x3f0 [ 1358.916900][ T8503] ? state_synced_show+0x130/0x130 [ 1358.916900][ T8503] __device_attach+0x538/0x860 [ 1358.916900][ T8503] device_initial_probe+0x4a/0x60 [ 1358.916900][ T8503] bus_probe_device+0x177/0x3d0 [ 1358.916900][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1358.916900][ T8503] device_add+0x399e/0x3f20 [ 1358.916900][ T8503] usb_new_device+0x1bd6/0x2a30 [ 1358.916900][ T8503] hub_event+0x5bc9/0x8890 [ 1359.322719][ T8503] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1359.322719][ T8503] ? kmsan_get_metadata+0x116/0x180 [ 1359.322719][ T8503] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1359.322719][ T8503] ? led_work+0x780/0x780 [ 1359.322719][ T8503] process_one_work+0x121c/0x1fc0 [ 1359.322719][ T8503] worker_thread+0x10cc/0x2740 [ 1359.322719][ T8503] ? kmsan_get_metadata+0x116/0x180 [ 1359.322719][ T8503] kthread+0x51c/0x560 [ 1359.322719][ T8503] ? process_one_work+0x1fc0/0x1fc0 [ 1359.322719][ T8503] ? kthread_blkcg+0x110/0x110 [ 1359.322719][ T8503] ret_from_fork+0x1f/0x30 [ 1359.322719][ T8503] Kernel Offset: disabled [ 1359.322719][ T8503] Rebooting in 86400 seconds..