x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xa00000000000000) 05:01:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xa00) 05:01:56 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) [ 845.316502][T12870] usb 3-1: USB disconnect, device number 67 [ 845.354986][T21220] FAULT_INJECTION: forcing a failure. [ 845.354986][T21220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.382443][T21220] CPU: 0 PID: 21220 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 845.392595][T21220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.402636][T21220] Call Trace: [ 845.405928][T21220] dump_stack+0x14a/0x1ce [ 845.410247][T21220] ? devkmsg_release+0x11c/0x11c [ 845.415173][T21220] ? show_regs_print_info+0x12/0x12 [ 845.420359][T21220] ? __vmalloc_node_flags_caller+0x78/0x90 [ 845.426155][T21220] ? __do_sys_bpf+0x36e3/0xbed0 [ 845.430997][T21220] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.437049][T21220] ? kasan_alloc_pages+0x4a/0x60 [ 845.441974][T21220] should_fail+0x6fb/0x860 [ 845.446382][T21220] ? setup_fault_attr+0x3d0/0x3d0 [ 845.451397][T21220] __alloc_pages_nodemask+0x1ee/0x7c0 [ 845.456760][T21220] ? gfp_pfmemalloc_allowed+0x130/0x130 05:01:56 executing program 0: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r4, r6) chown(&(0x7f0000000100)='./file0\x00', r2, r6) syz_usb_control_io(r0, 0x0, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5f, {0x5f, 0x0, "d7b67fdf9830f85b20a80b149214ef4b6051927c2ca97bcd45a02ac58404000000156abf62de6208a30b404669a04678d0f805804b0c519b6985da516215fb660a38fe98d9cba0419168b2d3fc00"/93}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 845.462290][T21220] ? __vmalloc_node_range+0x439/0x7b0 [ 845.467646][T21220] ? __kmalloc+0xf7/0x2d0 [ 845.471964][T21220] ? __vmalloc_node_range+0x439/0x7b0 [ 845.477324][T21220] __vmalloc_node_range+0x360/0x7b0 [ 845.482516][T21220] ? htab_map_alloc+0x4f2/0x15b0 [ 845.487460][T21220] __vmalloc_node_flags_caller+0x78/0x90 [ 845.493167][T21220] ? htab_map_alloc+0x4f2/0x15b0 [ 845.498092][T21220] htab_map_alloc+0x4f2/0x15b0 [ 845.502846][T21220] __do_sys_bpf+0x36e3/0xbed0 [ 845.507515][T21220] ? _kstrtoull+0x38d/0x490 [ 845.512006][T21220] ? kstrtouint_from_user+0x22d/0x2b0 [ 845.517362][T21220] ? kstrtol_from_user+0x320/0x320 [ 845.522459][T21220] ? __kasan_slab_free+0x1f2/0x230 [ 845.527644][T21220] ? __bpf_prog_put_rcu+0x300/0x300 [ 845.532830][T21220] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 845.539234][T21220] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.546591][T21220] ? get_pid_task+0x86/0x90 [ 845.551082][T21220] ? proc_fail_nth_write+0x18f/0x250 [ 845.556354][T21220] ? proc_fail_nth_read+0x1d0/0x1d0 [ 845.561537][T21220] ? proc_fail_nth_read+0x1d0/0x1d0 [ 845.568021][T21220] ? memset+0x1f/0x40 [ 845.571997][T21220] ? fsnotify+0x13a0/0x1460 [ 845.576495][T21220] ? __kernel_write+0x340/0x340 [ 845.581335][T21220] ? __fsnotify_parent+0x310/0x310 [ 845.586535][T21220] ? security_file_permission+0x128/0x300 [ 845.592286][T21220] ? __sb_end_write+0xa4/0xf0 [ 845.596951][T21220] ? vfs_write+0x427/0x4f0 [ 845.601353][T21220] ? fput_many+0x42/0x1a0 [ 845.605669][T21220] do_syscall_64+0xcb/0x150 [ 845.610160][T21220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.616038][T21220] RIP: 0033:0x45c829 [ 845.619919][T21220] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.639508][T21220] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.647904][T21220] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 845.655861][T21220] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 845.663818][T21220] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 845.671881][T21220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 845.679836][T21220] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 05:01:57 executing program 3 (fault-call:1 fault-nth:84): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 845.714778][T12870] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 845.784825][ T3229] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 845.811776][T21237] FAULT_INJECTION: forcing a failure. [ 845.811776][T21237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.884303][T21237] CPU: 1 PID: 21237 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 845.894465][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.904517][T21237] Call Trace: [ 845.907810][T21237] dump_stack+0x14a/0x1ce [ 845.912134][T21237] ? devkmsg_release+0x11c/0x11c [ 845.917058][T21237] ? show_regs_print_info+0x12/0x12 [ 845.922240][T21237] ? check_memory_region+0x50/0x2f0 [ 845.927423][T21237] ? kasan_alloc_pages+0x4a/0x60 [ 845.932385][T21237] should_fail+0x6fb/0x860 [ 845.936792][T21237] ? setup_fault_attr+0x3d0/0x3d0 [ 845.941808][T21237] __alloc_pages_nodemask+0x1ee/0x7c0 [ 845.947167][T21237] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 845.952702][T21237] __vmalloc_node_range+0x360/0x7b0 [ 845.957888][T21237] ? htab_map_alloc+0x4f2/0x15b0 [ 845.962809][T21237] __vmalloc_node_flags_caller+0x78/0x90 [ 845.968428][T21237] ? htab_map_alloc+0x4f2/0x15b0 [ 845.973348][T21237] htab_map_alloc+0x4f2/0x15b0 [ 845.979056][T21237] __do_sys_bpf+0x36e3/0xbed0 [ 845.983716][T21237] ? _kstrtoull+0x38d/0x490 [ 845.988412][T21237] ? visit_groups_merge+0x565/0x5b0 [ 845.993595][T21237] ? perf_log_throttle+0x470/0x470 [ 845.998685][T21237] ? ctx_sched_in+0x510/0x510 [ 846.003412][T21237] ? __bpf_prog_put_rcu+0x300/0x300 [ 846.008628][T21237] ? sched_clock+0x5/0x10 [ 846.012931][T21237] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.018970][T21237] ? ctx_sched_in+0x434/0x510 [ 846.023615][T21237] ? ctx_sched_out+0x6a0/0x6a0 [ 846.028355][T21237] ? _raw_spin_lock+0xa1/0x170 [ 846.033098][T21237] ? _raw_spin_lock+0xa1/0x170 [ 846.037840][T21237] ? __perf_event_task_sched_out+0xfe4/0x1110 [ 846.043874][T21237] ? __perf_event_task_sched_in+0x4f7/0x560 [ 846.049735][T21237] ? perf_pmu_sched_task+0x370/0x370 [ 846.055683][T21237] ? switch_mm_irqs_off+0x509/0xa10 [ 846.060849][T21237] ? plist_check_list+0x22b/0x240 [ 846.065843][T21237] ? switch_mm+0x100/0x100 [ 846.070245][T21237] ? _raw_spin_unlock_irq+0x5/0x20 [ 846.075348][T21237] ? finish_task_switch+0x235/0x4c0 [ 846.080515][T21237] ? __schedule+0x920/0xef0 [ 846.085011][T21237] do_syscall_64+0xcb/0x150 [ 846.089502][T21237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.095380][T21237] RIP: 0033:0x45c829 [ 846.099244][T21237] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.118833][T21237] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.127211][T21237] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 846.135167][T21237] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 846.143126][T21237] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 846.151090][T21237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 846.159061][T21237] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 05:01:57 executing program 3 (fault-call:1 fault-nth:85): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:01:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb00000000000000) 05:01:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xb00) [ 846.241041][T21245] FAULT_INJECTION: forcing a failure. [ 846.241041][T21245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.255065][T21245] CPU: 1 PID: 21245 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 846.265202][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.275229][T21245] Call Trace: [ 846.278490][T21245] dump_stack+0x14a/0x1ce [ 846.282789][T21245] ? devkmsg_release+0x11c/0x11c [ 846.287713][T21245] ? show_regs_print_info+0x12/0x12 [ 846.292881][T21245] ? __vmalloc_node_flags_caller+0x78/0x90 [ 846.298680][T21245] ? __do_sys_bpf+0x36e3/0xbed0 [ 846.303511][T21245] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.309554][T21245] ? kasan_alloc_pages+0x4a/0x60 [ 846.314477][T21245] should_fail+0x6fb/0x860 [ 846.318879][T21245] ? setup_fault_attr+0x3d0/0x3d0 [ 846.323904][T21245] __alloc_pages_nodemask+0x1ee/0x7c0 [ 846.329287][T21245] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 846.334817][T21245] ? __vmalloc_node_range+0x439/0x7b0 [ 846.340174][T21245] ? __vmalloc_node_range+0x439/0x7b0 [ 846.345533][T21245] ? __kmalloc+0xf7/0x2d0 [ 846.349846][T21245] ? __vmalloc_node_range+0x439/0x7b0 [ 846.355203][T21245] __vmalloc_node_range+0x360/0x7b0 [ 846.360387][T21245] ? htab_map_alloc+0x4f2/0x15b0 [ 846.365309][T21245] __vmalloc_node_flags_caller+0x78/0x90 [ 846.370930][T21245] ? htab_map_alloc+0x4f2/0x15b0 [ 846.375855][T21245] htab_map_alloc+0x4f2/0x15b0 [ 846.380604][T21245] __do_sys_bpf+0x36e3/0xbed0 [ 846.385267][T21245] ? _kstrtoull+0x38d/0x490 [ 846.389755][T21245] ? kstrtouint_from_user+0x22d/0x2b0 [ 846.395111][T21245] ? kstrtol_from_user+0x320/0x320 [ 846.400209][T21245] ? __kasan_slab_free+0x1f2/0x230 [ 846.405302][T21245] ? __bpf_prog_put_rcu+0x300/0x300 [ 846.410486][T21245] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 846.416884][T21245] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.422953][T21245] ? get_pid_task+0x86/0x90 [ 846.427561][T21245] ? proc_fail_nth_write+0x18f/0x250 [ 846.432828][T21245] ? proc_fail_nth_read+0x1d0/0x1d0 [ 846.437997][T21245] ? proc_fail_nth_read+0x1d0/0x1d0 [ 846.443168][T21245] ? memset+0x1f/0x40 [ 846.447119][T21245] ? fsnotify+0x13a0/0x1460 [ 846.451593][T21245] ? __kernel_write+0x340/0x340 [ 846.456428][T21245] ? __fsnotify_parent+0x310/0x310 [ 846.461509][T21245] ? security_file_permission+0x128/0x300 [ 846.467199][T21245] ? __sb_end_write+0xa4/0xf0 [ 846.471846][T21245] ? vfs_write+0x427/0x4f0 [ 846.476233][T21245] ? fput_many+0x42/0x1a0 [ 846.480537][T21245] do_syscall_64+0xcb/0x150 [ 846.485012][T21245] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.490874][T21245] RIP: 0033:0x45c829 [ 846.494758][T21245] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.514350][T21245] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.522743][T21245] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 846.530811][T21245] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 05:01:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc00000000000000) 05:01:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb00) 05:01:57 executing program 3 (fault-call:1 fault-nth:86): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 846.538753][T21245] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 846.546696][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 846.554695][T21245] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 846.574805][ T3229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.602489][T21268] FAULT_INJECTION: forcing a failure. [ 846.602489][T21268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.616101][T12870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.626667][T21268] CPU: 1 PID: 21268 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 846.636790][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.646822][T21268] Call Trace: [ 846.650106][T21268] dump_stack+0x14a/0x1ce [ 846.654432][T21268] ? devkmsg_release+0x11c/0x11c [ 846.659446][T21268] ? show_regs_print_info+0x12/0x12 [ 846.664632][T21268] ? __vmalloc_node_flags_caller+0x78/0x90 [ 846.670427][T21268] ? __do_sys_bpf+0x36e3/0xbed0 [ 846.675266][T21268] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.681316][T21268] ? kasan_alloc_pages+0x4a/0x60 [ 846.686242][T21268] should_fail+0x6fb/0x860 [ 846.690649][T21268] ? setup_fault_attr+0x3d0/0x3d0 [ 846.695676][T21268] __alloc_pages_nodemask+0x1ee/0x7c0 [ 846.701036][T21268] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 846.706570][T21268] ? __vmalloc_node_range+0x439/0x7b0 [ 846.711926][T21268] ? __kmalloc+0xf7/0x2d0 [ 846.716238][T21268] ? __vmalloc_node_range+0x439/0x7b0 [ 846.721595][T21268] __vmalloc_node_range+0x360/0x7b0 [ 846.726781][T21268] ? htab_map_alloc+0x4f2/0x15b0 [ 846.731706][T21268] __vmalloc_node_flags_caller+0x78/0x90 [ 846.737324][T21268] ? htab_map_alloc+0x4f2/0x15b0 [ 846.742249][T21268] htab_map_alloc+0x4f2/0x15b0 [ 846.747012][T21268] __do_sys_bpf+0x36e3/0xbed0 [ 846.751700][T21268] ? _kstrtoull+0x38d/0x490 [ 846.756190][T21268] ? kstrtouint_from_user+0x22d/0x2b0 [ 846.761549][T21268] ? kstrtol_from_user+0x320/0x320 [ 846.766652][T21268] ? __kasan_slab_free+0x1f2/0x230 [ 846.771751][T21268] ? __bpf_prog_put_rcu+0x300/0x300 [ 846.776921][T21268] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 846.783310][T21268] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.789349][T21268] ? get_pid_task+0x86/0x90 [ 846.793859][T21268] ? proc_fail_nth_write+0x18f/0x250 [ 846.799261][T21268] ? proc_fail_nth_read+0x1d0/0x1d0 [ 846.804428][T21268] ? proc_fail_nth_read+0x1d0/0x1d0 [ 846.809596][T21268] ? memset+0x1f/0x40 [ 846.813548][T21268] ? fsnotify+0x13a0/0x1460 [ 846.818032][T21268] ? __kernel_write+0x340/0x340 [ 846.822868][T21268] ? __fsnotify_parent+0x310/0x310 [ 846.827952][T21268] ? security_file_permission+0x128/0x300 [ 846.833735][T21268] ? __sb_end_write+0xa4/0xf0 [ 846.838650][T21268] ? vfs_write+0x427/0x4f0 [ 846.843125][T21268] ? fput_many+0x42/0x1a0 [ 846.847447][T21268] do_syscall_64+0xcb/0x150 [ 846.852012][T21268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.857888][T21268] RIP: 0033:0x45c829 [ 846.861766][T21268] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.881351][T21268] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.889732][T21268] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 05:01:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd00000000000000) 05:01:58 executing program 3 (fault-call:1 fault-nth:87): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 846.897693][T21268] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 846.905637][T21268] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 846.913580][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 846.921621][T21268] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 846.944774][T12870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 846.958144][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.971696][T12870] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 846.981315][T21282] FAULT_INJECTION: forcing a failure. [ 846.981315][T21282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.994969][T21282] CPU: 0 PID: 21282 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 847.005092][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.015122][T21282] Call Trace: [ 847.018389][T21282] dump_stack+0x14a/0x1ce [ 847.022804][T21282] ? devkmsg_release+0x11c/0x11c [ 847.027721][T21282] ? show_regs_print_info+0x12/0x12 [ 847.032940][T21282] ? __vmalloc_node_flags_caller+0x78/0x90 [ 847.038718][T21282] ? __do_sys_bpf+0x36e3/0xbed0 [ 847.043588][T21282] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.049630][T21282] ? kasan_alloc_pages+0x4a/0x60 [ 847.054537][T21282] should_fail+0x6fb/0x860 [ 847.058927][T21282] ? setup_fault_attr+0x3d0/0x3d0 [ 847.063925][T21282] __alloc_pages_nodemask+0x1ee/0x7c0 [ 847.064701][ T3229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.069282][T21282] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 847.069292][T21282] ? __vmalloc_node_range+0x439/0x7b0 [ 847.069300][T21282] ? __vmalloc_node_range+0x439/0x7b0 [ 847.069307][T21282] ? __kmalloc+0xf7/0x2d0 [ 847.069320][T21282] ? __vmalloc_node_range+0x439/0x7b0 [ 847.078520][ T3229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.083835][T21282] __vmalloc_node_range+0x360/0x7b0 [ 847.083847][T21282] ? htab_map_alloc+0x4f2/0x15b0 [ 847.083860][T21282] __vmalloc_node_flags_caller+0x78/0x90 [ 847.093507][ T3229] usb 1-1: Product: syz [ 847.094633][T21282] ? htab_map_alloc+0x4f2/0x15b0 [ 847.094642][T21282] htab_map_alloc+0x4f2/0x15b0 [ 847.094653][T21282] __do_sys_bpf+0x36e3/0xbed0 [ 847.094662][T21282] ? _kstrtoull+0x38d/0x490 [ 847.094670][T21282] ? kstrtouint_from_user+0x22d/0x2b0 [ 847.094676][T21282] ? kstrtol_from_user+0x320/0x320 [ 847.094683][T21282] ? __kasan_slab_free+0x1f2/0x230 [ 847.094694][T21282] ? __bpf_prog_put_rcu+0x300/0x300 [ 847.100923][ T3229] usb 1-1: Manufacturer: syz [ 847.104343][T21282] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 847.104354][T21282] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.104363][T21282] ? get_pid_task+0x86/0x90 [ 847.104374][T21282] ? proc_fail_nth_write+0x18f/0x250 [ 847.113629][ T3229] usb 1-1: SerialNumber: syz [ 847.117491][T21282] ? proc_fail_nth_read+0x1d0/0x1d0 [ 847.117499][T21282] ? proc_fail_nth_read+0x1d0/0x1d0 [ 847.117507][T21282] ? memset+0x1f/0x40 [ 847.117515][T21282] ? fsnotify+0x13a0/0x1460 [ 847.117524][T21282] ? __kernel_write+0x340/0x340 [ 847.117532][T21282] ? __fsnotify_parent+0x310/0x310 [ 847.117543][T21282] ? security_file_permission+0x128/0x300 [ 847.117549][T21282] ? __sb_end_write+0xa4/0xf0 [ 847.117560][T21282] ? vfs_write+0x427/0x4f0 [ 847.134730][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 05:01:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe00000000000000) [ 847.137116][T21282] ? fput_many+0x42/0x1a0 [ 847.141946][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.146593][T21282] do_syscall_64+0xcb/0x150 [ 847.146604][T21282] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.146611][T21282] RIP: 0033:0x45c829 [ 847.146618][T21282] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 847.146622][T21282] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 847.146630][T21282] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 847.146634][T21282] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 847.146638][T21282] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 847.146642][T21282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 847.146651][T21282] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 847.154212][T12870] usb 3-1: Product: syz [ 847.358580][T12870] usb 3-1: Manufacturer: syz [ 847.363170][T12870] usb 3-1: SerialNumber: syz [ 847.405051][T12870] cdc_ncm 3-1:1.0: bind() failure [ 848.324624][ T3229] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 848.331060][ T3229] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 848.339813][ T3229] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 848.545776][ T3229] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 848.560099][ T3229] usb 1-1: USB disconnect, device number 96 [ 848.567836][ T3229] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 05:02:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xc00) [ 848.608987][T13116] usb 3-1: USB disconnect, device number 68 [ 849.294503][T13116] usb 1-1: new high-speed USB device number 97 using dummy_hcd 05:02:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc00) 05:02:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1000000000000000) 05:02:01 executing program 3 (fault-call:1 fault-nth:88): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x600, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$UHID_CREATE2(r3, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xb4, 0x8, 0xe9f8, 0x4, 0xfffffffc, 0x3, "2b5c65b48ededaaea37e418004a65206b92f8782607708e61c0c9494e7eea8eae958099b47e0570dce09d44f370444c4f08a170381292bad96adca83543d9a3918ffd08c840e48aedc83971a77a03c5b6caf63b1a8d14fc572ae610e197b0dc9fbf7502b795a7b3436ac7558174017f8e571f02ba78cbae051f6a3877a2ae7e328226ed8a2ffd03ab2696cb20d1274a390336c68c543bba5845ab717d28931a10e8bc4b3afdab78a37480b77cb38b9b8e89260f2"}}, 0x1cc) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xd00) [ 849.851044][T21329] FAULT_INJECTION: forcing a failure. [ 849.851044][T21329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.864373][T21329] CPU: 0 PID: 21329 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 849.874623][T21329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.884648][T21329] Call Trace: [ 849.887911][T21329] dump_stack+0x14a/0x1ce [ 849.892363][T21329] ? devkmsg_release+0x11c/0x11c [ 849.897474][T21329] ? show_regs_print_info+0x12/0x12 [ 849.902783][T21329] ? __vmalloc_node_flags_caller+0x78/0x90 [ 849.908629][T21329] ? __do_sys_bpf+0x36e3/0xbed0 [ 849.913466][T21329] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 849.919516][T21329] ? kasan_alloc_pages+0x4a/0x60 [ 849.924439][T21329] should_fail+0x6fb/0x860 [ 849.928844][T21329] ? setup_fault_attr+0x3d0/0x3d0 [ 849.933855][T21329] __alloc_pages_nodemask+0x1ee/0x7c0 [ 849.939212][T21329] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 849.944740][T21329] ? __vmalloc_node_range+0x439/0x7b0 [ 849.950098][T21329] ? __vmalloc_node_range+0x439/0x7b0 [ 849.955460][T21329] ? __kmalloc+0xf7/0x2d0 [ 849.959777][T21329] ? __vmalloc_node_range+0x439/0x7b0 [ 849.965134][T21329] __vmalloc_node_range+0x360/0x7b0 [ 849.970321][T21329] ? htab_map_alloc+0x4f2/0x15b0 [ 849.975245][T21329] __vmalloc_node_flags_caller+0x78/0x90 [ 849.980863][T21329] ? htab_map_alloc+0x4f2/0x15b0 [ 849.985793][T21329] htab_map_alloc+0x4f2/0x15b0 [ 849.990542][T21329] __do_sys_bpf+0x36e3/0xbed0 [ 849.995201][T21329] ? _kstrtoull+0x38d/0x490 05:02:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1100000000000000) [ 849.999686][T21329] ? kstrtouint_from_user+0x22d/0x2b0 [ 850.005040][T21329] ? kstrtol_from_user+0x320/0x320 [ 850.010132][T21329] ? __kasan_slab_free+0x1f2/0x230 [ 850.015224][T21329] ? __bpf_prog_put_rcu+0x300/0x300 [ 850.020408][T21329] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 850.026804][T21329] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.032859][T21329] ? get_pid_task+0x86/0x90 [ 850.037346][T21329] ? proc_fail_nth_write+0x18f/0x250 [ 850.042619][T21329] ? proc_fail_nth_read+0x1d0/0x1d0 [ 850.047805][T21329] ? proc_fail_nth_read+0x1d0/0x1d0 [ 850.052982][T21329] ? memset+0x1f/0x40 [ 850.056950][T21329] ? fsnotify+0x13a0/0x1460 [ 850.061435][T21329] ? __kernel_write+0x340/0x340 [ 850.066253][T21329] ? __fsnotify_parent+0x310/0x310 [ 850.071358][T21329] ? security_file_permission+0x128/0x300 [ 850.077044][T21329] ? __sb_end_write+0xa4/0xf0 [ 850.081698][T21329] ? vfs_write+0x427/0x4f0 [ 850.086094][T21329] ? fput_many+0x42/0x1a0 [ 850.090398][T21329] do_syscall_64+0xcb/0x150 [ 850.094881][T21329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.100738][T21329] RIP: 0033:0x45c829 [ 850.104607][T21329] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.114468][ T3229] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 850.124277][T21329] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.124287][T21329] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 05:02:01 executing program 3 (fault-call:1 fault-nth:89): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 850.124292][T21329] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 850.124296][T21329] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 850.124300][T21329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 850.124310][T21329] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 850.180538][T13116] usb 1-1: device descriptor read/all, error -71 [ 850.214668][T21355] FAULT_INJECTION: forcing a failure. [ 850.214668][T21355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 850.228945][T21355] CPU: 1 PID: 21355 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 850.239076][T21355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.249106][T21355] Call Trace: [ 850.252384][T21355] dump_stack+0x14a/0x1ce [ 850.256702][T21355] ? devkmsg_release+0x11c/0x11c [ 850.261625][T21355] ? show_regs_print_info+0x12/0x12 [ 850.266808][T21355] ? __vmalloc_node_flags_caller+0x78/0x90 [ 850.272602][T21355] ? __do_sys_bpf+0x36e3/0xbed0 [ 850.277433][T21355] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.283467][T21355] ? kasan_alloc_pages+0x4a/0x60 [ 850.288483][T21355] should_fail+0x6fb/0x860 [ 850.292883][T21355] ? setup_fault_attr+0x3d0/0x3d0 [ 850.297878][T21355] __alloc_pages_nodemask+0x1ee/0x7c0 [ 850.303218][T21355] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 850.308731][T21355] ? __vmalloc_node_range+0x439/0x7b0 [ 850.314103][T21355] ? __kmalloc+0xf7/0x2d0 [ 850.318409][T21355] ? __vmalloc_node_range+0x439/0x7b0 [ 850.323770][T21355] __vmalloc_node_range+0x360/0x7b0 [ 850.328951][T21355] ? htab_map_alloc+0x4f2/0x15b0 [ 850.333860][T21355] __vmalloc_node_flags_caller+0x78/0x90 [ 850.339462][T21355] ? htab_map_alloc+0x4f2/0x15b0 [ 850.345582][T21355] htab_map_alloc+0x4f2/0x15b0 [ 850.350312][T21355] __do_sys_bpf+0x36e3/0xbed0 [ 850.354957][T21355] ? _kstrtoull+0x38d/0x490 [ 850.359427][T21355] ? kstrtouint_from_user+0x22d/0x2b0 [ 850.364808][T21355] ? kstrtol_from_user+0x320/0x320 [ 850.369927][T21355] ? __kasan_slab_free+0x1f2/0x230 [ 850.375007][T21355] ? __bpf_prog_put_rcu+0x300/0x300 [ 850.380205][T21355] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 850.386588][T21355] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.392621][T21355] ? get_pid_task+0x86/0x90 [ 850.397094][T21355] ? proc_fail_nth_write+0x18f/0x250 [ 850.402347][T21355] ? proc_fail_nth_read+0x1d0/0x1d0 [ 850.407527][T21355] ? proc_fail_nth_read+0x1d0/0x1d0 [ 850.412700][T21355] ? memset+0x1f/0x40 [ 850.416649][T21355] ? fsnotify+0x13a0/0x1460 [ 850.421135][T21355] ? __kernel_write+0x340/0x340 [ 850.425963][T21355] ? __fsnotify_parent+0x310/0x310 [ 850.431042][T21355] ? security_file_permission+0x128/0x300 [ 850.436741][T21355] ? __sb_end_write+0xa4/0xf0 [ 850.441387][T21355] ? vfs_write+0x427/0x4f0 [ 850.445782][T21355] ? fput_many+0x42/0x1a0 [ 850.450079][T21355] do_syscall_64+0xcb/0x150 [ 850.454573][T21355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.460431][T21355] RIP: 0033:0x45c829 [ 850.464295][T21355] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.483882][T21355] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.492257][T21355] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 850.500196][T21355] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 850.508136][T21355] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 05:02:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1200000000000000) [ 850.516084][T21355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 850.524037][T21355] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 05:02:02 executing program 3 (fault-call:1 fault-nth:90): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 850.651382][T21365] FAULT_INJECTION: forcing a failure. [ 850.651382][T21365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 850.664784][T21365] CPU: 0 PID: 21365 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 850.674911][T21365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.684937][T21365] Call Trace: [ 850.688258][T21365] dump_stack+0x14a/0x1ce [ 850.692561][T21365] ? devkmsg_release+0x11c/0x11c [ 850.697486][T21365] ? show_regs_print_info+0x12/0x12 [ 850.702660][T21365] ? kasan_alloc_pages+0x4a/0x60 [ 850.707574][T21365] should_fail+0x6fb/0x860 [ 850.711981][T21365] ? setup_fault_attr+0x3d0/0x3d0 [ 850.716993][T21365] __alloc_pages_nodemask+0x1ee/0x7c0 [ 850.722357][T21365] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 850.727887][T21365] ? __vmalloc_node_range+0x439/0x7b0 [ 850.733241][T21365] ? __kmalloc+0xf7/0x2d0 [ 850.737553][T21365] ? __vmalloc_node_range+0x439/0x7b0 [ 850.742909][T21365] __vmalloc_node_range+0x360/0x7b0 [ 850.748096][T21365] ? htab_map_alloc+0x4f2/0x15b0 [ 850.753017][T21365] __vmalloc_node_flags_caller+0x78/0x90 [ 850.758645][T21365] ? htab_map_alloc+0x4f2/0x15b0 [ 850.763578][T21365] htab_map_alloc+0x4f2/0x15b0 [ 850.768330][T21365] __do_sys_bpf+0x36e3/0xbed0 [ 850.772990][T21365] ? retint_kernel+0x1b/0x1b [ 850.774438][ T3229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.777563][T21365] ? _kstrtoull+0x38d/0x490 [ 850.777572][T21365] ? kstrtouint_from_user+0x22d/0x2b0 [ 850.777579][T21365] ? kstrtol_from_user+0x320/0x320 [ 850.777593][T21365] ? __kasan_slab_free+0x1f2/0x230 [ 850.801349][ T3229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.802632][T21365] ? __bpf_prog_put_rcu+0x300/0x300 [ 850.802640][T21365] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 850.802648][T21365] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.802660][T21365] ? get_pid_task+0x86/0x90 05:02:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2500000000000000) [ 850.819873][ T3229] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 850.823726][T21365] ? proc_fail_nth_write+0x18f/0x250 [ 850.823735][T21365] ? proc_fail_nth_read+0x1d0/0x1d0 [ 850.823741][T21365] ? proc_fail_nth_read+0x1d0/0x1d0 [ 850.823751][T21365] ? memset+0x1f/0x40 [ 850.873042][T21365] ? fsnotify+0x13a0/0x1460 [ 850.877538][T21365] ? __kernel_write+0x340/0x340 [ 850.882378][T21365] ? __fsnotify_parent+0x310/0x310 [ 850.887481][T21365] ? security_file_permission+0x128/0x300 [ 850.893179][T21365] ? __sb_end_write+0xa4/0xf0 [ 850.897836][T21365] ? vfs_write+0x427/0x4f0 [ 850.902295][T21365] ? fput_many+0x42/0x1a0 [ 850.906600][T21365] do_syscall_64+0xcb/0x150 [ 850.911104][T21365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.916990][T21365] RIP: 0033:0x45c829 [ 850.920888][T21365] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.940465][T21365] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 05:02:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xe00) [ 850.948851][T21365] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 850.956807][T21365] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 850.964759][T21365] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 850.972711][T21365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 850.980665][T21365] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 851.004438][ T3229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.013471][ T3229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.021897][ T3229] usb 3-1: Product: syz [ 851.026426][ T3229] usb 3-1: Manufacturer: syz [ 851.031012][ T3229] usb 3-1: SerialNumber: syz [ 851.064346][T13116] usb 1-1: new high-speed USB device number 98 using dummy_hcd 05:02:02 executing program 3 (fault-call:1 fault-nth:91): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 851.183082][T21391] FAULT_INJECTION: forcing a failure. [ 851.183082][T21391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 851.197021][T21391] CPU: 0 PID: 21391 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 851.207153][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.217198][T21391] Call Trace: [ 851.220473][T21391] dump_stack+0x14a/0x1ce [ 851.224782][T21391] ? devkmsg_release+0x11c/0x11c [ 851.229904][T21391] ? show_regs_print_info+0x12/0x12 [ 851.235076][T21391] ? preempt_schedule_irq+0xe7/0x140 [ 851.240371][T21391] ? kasan_alloc_pages+0x4a/0x60 [ 851.245280][T21391] should_fail+0x6fb/0x860 [ 851.249670][T21391] ? setup_fault_attr+0x3d0/0x3d0 [ 851.254670][T21391] __alloc_pages_nodemask+0x1ee/0x7c0 [ 851.260010][T21391] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 851.265556][T21391] ? __vmalloc_node_range+0x439/0x7b0 [ 851.270893][T21391] ? __kmalloc+0xf7/0x2d0 [ 851.275188][T21391] ? __vmalloc_node_range+0x439/0x7b0 [ 851.280525][T21391] __vmalloc_node_range+0x360/0x7b0 [ 851.285718][T21391] ? htab_map_alloc+0x4f2/0x15b0 [ 851.290637][T21391] __vmalloc_node_flags_caller+0x78/0x90 [ 851.296236][T21391] ? htab_map_alloc+0x4f2/0x15b0 [ 851.301138][T21391] htab_map_alloc+0x4f2/0x15b0 [ 851.305872][T21391] __do_sys_bpf+0x36e3/0xbed0 [ 851.310522][T21391] ? visit_groups_merge+0x565/0x5b0 [ 851.315712][T21391] ? perf_log_throttle+0x470/0x470 [ 851.320789][T21391] ? ctx_sched_in+0x510/0x510 [ 851.325430][T21391] ? __bpf_prog_put_rcu+0x300/0x300 [ 851.330599][T21391] ? sched_clock+0x5/0x10 [ 851.334897][T21391] ? event_sched_out+0xb30/0xd50 [ 851.339806][T21391] ? ctx_sched_in+0x434/0x510 [ 851.344463][T21391] ? ctx_sched_out+0x6a0/0x6a0 [ 851.349201][T21391] ? _raw_spin_lock+0xa1/0x170 [ 851.354018][T21391] ? __perf_event_task_sched_out+0xfe4/0x1110 [ 851.360050][T21391] ? __perf_event_task_sched_in+0x4f7/0x560 [ 851.365915][T21391] ? perf_pmu_sched_task+0x370/0x370 [ 851.371174][T21391] ? switch_mm_irqs_off+0x509/0xa10 [ 851.376357][T21391] ? plist_check_list+0x22b/0x240 [ 851.381346][T21391] ? switch_mm+0x100/0x100 [ 851.385744][T21391] ? _raw_spin_unlock_irq+0x5/0x20 [ 851.390833][T21391] ? finish_task_switch+0x235/0x4c0 [ 851.395996][T21391] ? __schedule+0x920/0xef0 [ 851.400477][T21391] do_syscall_64+0xcb/0x150 [ 851.404957][T21391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 851.410816][T21391] RIP: 0033:0x45c829 [ 851.414676][T21391] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.434248][T21391] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 851.442642][T21391] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 851.450592][T21391] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 851.458530][T21391] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 851.466469][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 851.474422][T21391] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 851.534314][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 851.664372][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 851.675372][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.686950][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.697220][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 851.710621][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 851.717573][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 851.726896][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.735668][T13116] usb 1-1: config 0 descriptor?? [ 852.314892][T13116] elecom 0003:056E:00FF.007E: item fetching failed at offset 0/1 [ 852.322704][T13116] elecom: probe of 0003:056E:00FF.007E failed with error -22 [ 852.354274][ T3229] cdc_ncm 3-1:1.0: bind() failure [ 852.384339][ T3229] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 852.404281][ T3229] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 852.413953][ T3229] usb 3-1: USB disconnect, device number 69 [ 852.516770][T12870] usb 1-1: USB disconnect, device number 98 05:02:04 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000000000000000) 05:02:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd00) [ 853.294233][T13116] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 853.324171][T12870] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 853.534160][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 853.654195][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 853.665197][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.676844][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.687286][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 853.694174][T12870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.700951][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 853.710732][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.717644][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 853.728179][T12870] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 05:02:05 executing program 3 (fault-call:1 fault-nth:92): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x1100) 05:02:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffefff7f00000000) 05:02:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0xc1c9]}, &(0x7f0000000080), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) fallocate(r1, 0x3, 0x10001, 0x613e) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 853.746220][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.760162][T21417] FAULT_INJECTION: forcing a failure. [ 853.760162][T21417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 853.770029][T13116] usb 1-1: config 0 descriptor?? [ 853.775887][T21417] CPU: 1 PID: 21417 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 853.788382][T21417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.794189][T13116] usb 1-1: can't set config #0, error -71 [ 853.798419][T21417] Call Trace: [ 853.805153][T13116] usb 1-1: USB disconnect, device number 99 [ 853.807376][T21417] dump_stack+0x14a/0x1ce [ 853.807390][T21417] ? devkmsg_release+0x11c/0x11c [ 853.822481][T21417] ? show_regs_print_info+0x12/0x12 [ 853.827646][T21417] ? __vmalloc_node_flags_caller+0x78/0x90 [ 853.833422][T21417] ? __do_sys_bpf+0x36e3/0xbed0 [ 853.838250][T21417] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.844322][T21417] ? kasan_alloc_pages+0x4a/0x60 [ 853.849247][T21417] should_fail+0x6fb/0x860 [ 853.853649][T21417] ? setup_fault_attr+0x3d0/0x3d0 [ 853.858659][T21417] __alloc_pages_nodemask+0x1ee/0x7c0 [ 853.864020][T21417] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 853.869547][T21417] ? __vmalloc_node_range+0x439/0x7b0 [ 853.874912][T21417] ? __vmalloc_node_range+0x439/0x7b0 [ 853.880265][T21417] ? __kmalloc+0xf7/0x2d0 [ 853.884585][T21417] ? __vmalloc_node_range+0x439/0x7b0 [ 853.889940][T21417] __vmalloc_node_range+0x360/0x7b0 [ 853.895126][T21417] ? htab_map_alloc+0x4f2/0x15b0 [ 853.900054][T21417] __vmalloc_node_flags_caller+0x78/0x90 [ 853.905668][T21417] ? htab_map_alloc+0x4f2/0x15b0 [ 853.910589][T21417] htab_map_alloc+0x4f2/0x15b0 [ 853.915338][T21417] __do_sys_bpf+0x36e3/0xbed0 [ 853.920019][T21417] ? _kstrtoull+0x38d/0x490 [ 853.924503][T21417] ? kstrtouint_from_user+0x22d/0x2b0 [ 853.929859][T21417] ? kstrtol_from_user+0x320/0x320 [ 853.934958][T21417] ? __kasan_slab_free+0x1f2/0x230 [ 853.940050][T21417] ? __bpf_prog_put_rcu+0x300/0x300 [ 853.945229][T21417] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 853.951627][T21417] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.957678][T21417] ? get_pid_task+0x86/0x90 [ 853.962163][T21417] ? proc_fail_nth_write+0x18f/0x250 [ 853.967472][T21417] ? proc_fail_nth_read+0x1d0/0x1d0 [ 853.972685][T21417] ? proc_fail_nth_read+0x1d0/0x1d0 [ 853.977857][T21417] ? memset+0x1f/0x40 [ 853.981811][T21417] ? fsnotify+0x13a0/0x1460 [ 853.986311][T21417] ? __kernel_write+0x340/0x340 [ 853.991147][T21417] ? __fsnotify_parent+0x310/0x310 [ 853.996227][T21417] ? security_file_permission+0x128/0x300 [ 854.001913][T21417] ? __sb_end_write+0xa4/0xf0 [ 854.006563][T21417] ? vfs_write+0x427/0x4f0 [ 854.010948][T21417] ? fput_many+0x42/0x1a0 [ 854.015251][T21417] do_syscall_64+0xcb/0x150 [ 854.019721][T21417] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.025580][T21417] RIP: 0033:0x45c829 [ 854.029443][T21417] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:02:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffff7f00000000) 05:02:05 executing program 3 (fault-call:1 fault-nth:93): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 854.049018][T21417] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.057398][T21417] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 854.065339][T21417] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 854.073316][T21417] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 854.081263][T21417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 854.089208][T21417] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 854.121320][T21440] FAULT_INJECTION: forcing a failure. [ 854.121320][T21440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.134594][T21440] CPU: 1 PID: 21440 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 854.144719][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.154752][T21440] Call Trace: [ 854.158013][T21440] dump_stack+0x14a/0x1ce [ 854.162311][T21440] ? devkmsg_release+0x11c/0x11c [ 854.164092][T13116] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 854.167220][T21440] ? show_regs_print_info+0x12/0x12 [ 854.167229][T21440] ? __vmalloc_node_flags_caller+0x78/0x90 [ 854.167237][T21440] ? __do_sys_bpf+0x36e3/0xbed0 [ 854.167250][T21440] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.196697][T21440] ? kasan_alloc_pages+0x4a/0x60 [ 854.201625][T21440] should_fail+0x6fb/0x860 [ 854.206028][T21440] ? setup_fault_attr+0x3d0/0x3d0 [ 854.211037][T21440] __alloc_pages_nodemask+0x1ee/0x7c0 [ 854.216399][T21440] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 854.221932][T21440] ? __vmalloc_node_range+0x439/0x7b0 [ 854.227314][T21440] ? __kmalloc+0xf7/0x2d0 [ 854.231645][T21440] ? __vmalloc_node_range+0x439/0x7b0 [ 854.237090][T21440] __vmalloc_node_range+0x360/0x7b0 [ 854.242277][T21440] ? htab_map_alloc+0x4f2/0x15b0 [ 854.247222][T21440] __vmalloc_node_flags_caller+0x78/0x90 [ 854.252837][T21440] ? htab_map_alloc+0x4f2/0x15b0 [ 854.257757][T21440] htab_map_alloc+0x4f2/0x15b0 [ 854.262505][T21440] __do_sys_bpf+0x36e3/0xbed0 [ 854.267165][T21440] ? _kstrtoull+0x38d/0x490 [ 854.271649][T21440] ? kstrtouint_from_user+0x22d/0x2b0 [ 854.277003][T21440] ? kstrtol_from_user+0x320/0x320 [ 854.282096][T21440] ? __kasan_slab_free+0x1f2/0x230 [ 854.287189][T21440] ? __bpf_prog_put_rcu+0x300/0x300 [ 854.292373][T21440] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 854.298770][T21440] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.304821][T21440] ? get_pid_task+0x86/0x90 [ 854.309307][T21440] ? proc_fail_nth_write+0x18f/0x250 [ 854.314697][T21440] ? proc_fail_nth_read+0x1d0/0x1d0 05:02:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffffff00000000) [ 854.319883][T21440] ? proc_fail_nth_read+0x1d0/0x1d0 [ 854.325067][T21440] ? memset+0x1f/0x40 [ 854.329037][T21440] ? fsnotify+0x13a0/0x1460 [ 854.333536][T21440] ? __kernel_write+0x340/0x340 [ 854.338374][T21440] ? __fsnotify_parent+0x310/0x310 [ 854.343475][T21440] ? security_file_permission+0x128/0x300 [ 854.349228][T21440] ? __sb_end_write+0xa4/0xf0 [ 854.353873][T21440] ? vfs_write+0x427/0x4f0 [ 854.358284][T21440] ? fput_many+0x42/0x1a0 [ 854.362582][T21440] do_syscall_64+0xcb/0x150 [ 854.367062][T21440] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.372921][T21440] RIP: 0033:0x45c829 [ 854.376782][T21440] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 854.396361][T21440] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.404754][T21440] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 854.412710][T21440] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 05:02:05 executing program 3 (fault-call:1 fault-nth:94): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 854.414074][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 854.420660][T21440] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 854.420664][T21440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 854.420669][T21440] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 854.452447][T21452] FAULT_INJECTION: forcing a failure. [ 854.452447][T21452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.466354][T21452] CPU: 1 PID: 21452 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 854.476500][T21452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.486535][T21452] Call Trace: [ 854.489841][T21452] dump_stack+0x14a/0x1ce [ 854.494159][T21452] ? devkmsg_release+0x11c/0x11c [ 854.499883][T21452] ? show_regs_print_info+0x12/0x12 [ 854.505089][T21452] ? kasan_alloc_pages+0x4a/0x60 [ 854.510015][T21452] should_fail+0x6fb/0x860 [ 854.514420][T21452] ? setup_fault_attr+0x3d0/0x3d0 [ 854.519430][T21452] __alloc_pages_nodemask+0x1ee/0x7c0 [ 854.524792][T21452] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 854.530322][T21452] ? __vmalloc_node_range+0x439/0x7b0 [ 854.535676][T21452] ? __kmalloc+0xf7/0x2d0 [ 854.540036][T21452] ? __vmalloc_node_range+0x439/0x7b0 [ 854.545392][T21452] __vmalloc_node_range+0x360/0x7b0 [ 854.551276][T21452] ? htab_map_alloc+0x4f2/0x15b0 [ 854.556233][T21452] __vmalloc_node_flags_caller+0x78/0x90 [ 854.561856][T21452] ? htab_map_alloc+0x4f2/0x15b0 [ 854.566781][T21452] htab_map_alloc+0x4f2/0x15b0 [ 854.571528][T21452] ? __do_sys_bpf+0x32c/0xbed0 [ 854.574146][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 854.576271][T21452] __do_sys_bpf+0x36e3/0xbed0 [ 854.576286][T21452] ? _kstrtoull+0x38d/0x490 [ 854.589145][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.591842][T21452] ? kstrtouint_from_user+0x22d/0x2b0 [ 854.591855][T21452] ? kstrtol_from_user+0x320/0x320 [ 854.596826][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.607925][T21452] ? __schedule+0x920/0xef0 [ 854.607934][T21452] ? __bpf_prog_put_rcu+0x300/0x300 [ 854.607942][T21452] ? get_pid_task+0x86/0x90 [ 854.607950][T21452] ? proc_fail_nth_write+0x18f/0x250 [ 854.607957][T21452] ? proc_fail_nth_read+0x1d0/0x1d0 [ 854.607962][T21452] ? preempt_schedule_irq+0xe7/0x140 [ 854.607968][T21452] ? preempt_schedule_notrace+0x130/0x130 [ 854.607978][T21452] ? proc_fail_nth_read+0x1d0/0x1d0 05:02:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x1200) [ 854.619956][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 854.628276][T21452] ? memset+0x1f/0x40 [ 854.628284][T21452] ? fsnotify+0x13a0/0x1460 [ 854.628293][T21452] ? retint_kernel+0x1b/0x1b [ 854.628302][T21452] ? __kernel_write+0x340/0x340 [ 854.628310][T21452] ? selinux_file_permission+0x18e/0x520 [ 854.628321][T21452] ? __fsnotify_parent+0x310/0x310 [ 854.634351][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 854.637986][T21452] ? security_file_permission+0x128/0x300 [ 854.637997][T21452] ? __sb_end_write+0xa4/0xf0 [ 854.642513][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 854.647733][T21452] ? vfs_write+0x427/0x4f0 [ 854.647741][T21452] ? fput_many+0x42/0x1a0 [ 854.647751][T21452] do_syscall_64+0xcb/0x150 [ 854.647762][T21452] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.647770][T21452] RIP: 0033:0x45c829 [ 854.647782][T21452] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 854.655179][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.658301][T21452] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.658309][T21452] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 854.658314][T21452] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 854.658318][T21452] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 854.658322][T21452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 854.658333][T21452] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 854.668435][T13116] usb 1-1: config 0 descriptor?? [ 854.695180][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.853724][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.864482][T12870] usb 3-1: Product: syz [ 854.868635][T12870] usb 3-1: Manufacturer: syz [ 854.873212][T12870] usb 3-1: SerialNumber: syz [ 855.274617][T13116] elecom 0003:056E:00FF.007F: item fetching failed at offset 0/1 [ 855.282450][T13116] elecom: probe of 0003:056E:00FF.007F failed with error -22 [ 855.475608][T13116] usb 1-1: USB disconnect, device number 100 [ 856.003998][T12870] cdc_ncm 3-1:1.0: bind() failure [ 856.024014][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 856.044047][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 856.053770][T12870] usb 3-1: USB disconnect, device number 70 [ 856.243947][ T3229] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 856.483919][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 856.604026][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 856.615009][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.626027][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.635993][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 05:02:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:08 executing program 3 (fault-call:1 fault-nth:95): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) recvmmsg(r0, &(0x7f0000001c40), 0x0, 0xc00020a0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="5458734979e0aa4f2d51d6786855426d0d0b6a4afd8afdfa07f20b73f07157e95194b450b423376e34ef740fbcb18978084da28557eb32423c3e", 0x3a}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xbf0]}, 0x8, 0x80800) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000140)=0x7fffffff) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:02:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe00) 05:02:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x2500) [ 856.649126][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 856.655748][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 856.664776][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.673275][ T3229] usb 1-1: config 0 descriptor?? [ 856.698989][T21480] FAULT_INJECTION: forcing a failure. [ 856.698989][T21480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 856.712376][T21480] CPU: 0 PID: 21480 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 856.722496][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.732520][T21480] Call Trace: [ 856.735782][T21480] dump_stack+0x14a/0x1ce [ 856.740081][T21480] ? devkmsg_release+0x11c/0x11c 05:02:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000002106e05ff00400000000001090224000100000000090400898003010000092100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="a50000000089ad4e9747d39c1238f83592fe0000007ce8b08c1bf3de22270ff4e0d501fa7d4dfbdc89ec8e112a92f1bcb07dbdb96a909daba2"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 856.745012][T21480] ? show_regs_print_info+0x12/0x12 [ 856.750191][T21480] ? __vmalloc_node_flags_caller+0x78/0x90 [ 856.755972][T21480] ? __do_sys_bpf+0x36e3/0xbed0 [ 856.760802][T21480] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 856.766842][T21480] ? kasan_alloc_pages+0x4a/0x60 [ 856.771787][T21480] should_fail+0x6fb/0x860 [ 856.776274][T21480] ? setup_fault_attr+0x3d0/0x3d0 [ 856.781279][T21480] __alloc_pages_nodemask+0x1ee/0x7c0 [ 856.786632][T21480] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 856.792165][T21480] ? __vmalloc_node_range+0x439/0x7b0 [ 856.797511][T21480] ? __kmalloc+0xf7/0x2d0 [ 856.801816][T21480] ? __vmalloc_node_range+0x439/0x7b0 [ 856.807159][T21480] __vmalloc_node_range+0x360/0x7b0 [ 856.812347][T21480] ? htab_map_alloc+0x4f2/0x15b0 [ 856.817256][T21480] __vmalloc_node_flags_caller+0x78/0x90 [ 856.822858][T21480] ? htab_map_alloc+0x4f2/0x15b0 [ 856.827767][T21480] htab_map_alloc+0x4f2/0x15b0 [ 856.832501][T21480] __do_sys_bpf+0x36e3/0xbed0 [ 856.837148][T21480] ? _kstrtoull+0x38d/0x490 [ 856.841628][T21480] ? kstrtouint_from_user+0x22d/0x2b0 [ 856.846970][T21480] ? kstrtol_from_user+0x320/0x320 [ 856.852077][T21480] ? __kasan_slab_free+0x1f2/0x230 [ 856.853928][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 856.857168][T21480] ? __bpf_prog_put_rcu+0x300/0x300 [ 856.857177][T21480] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 856.857187][T21480] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 856.857195][T21480] ? get_pid_task+0x86/0x90 [ 856.857207][T21480] ? proc_fail_nth_write+0x18f/0x250 [ 856.863215][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 856.868243][T21480] ? proc_fail_nth_read+0x1d0/0x1d0 [ 856.868252][T21480] ? proc_fail_nth_read+0x1d0/0x1d0 [ 856.868258][T21480] ? memset+0x1f/0x40 [ 856.868266][T21480] ? fsnotify+0x13a0/0x1460 [ 856.868275][T21480] ? __kernel_write+0x340/0x340 [ 856.868284][T21480] ? __fsnotify_parent+0x310/0x310 [ 856.868293][T21480] ? security_file_permission+0x128/0x300 [ 856.868304][T21480] ? __sb_end_write+0xa4/0xf0 [ 856.884203][ T3229] usb 1-1: USB disconnect, device number 101 [ 856.885202][T21480] ? vfs_write+0x427/0x4f0 [ 856.885209][T21480] ? fput_many+0x42/0x1a0 [ 856.885221][T21480] do_syscall_64+0xcb/0x150 [ 856.885235][T21480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 856.960726][T21480] RIP: 0033:0x45c829 [ 856.963879][T12870] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 856.964591][T21480] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 856.964595][T21480] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 05:02:08 executing program 3 (fault-call:1 fault-nth:96): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 856.964608][T21480] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 857.008017][T21480] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 857.015957][T21480] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.023905][T21480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 857.031853][T21480] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 857.049838][T21499] FAULT_INJECTION: forcing a failure. [ 857.049838][T21499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.063082][T21499] CPU: 0 PID: 21499 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 857.073219][T21499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.083243][T21499] Call Trace: [ 857.086513][T21499] dump_stack+0x14a/0x1ce [ 857.090822][T21499] ? devkmsg_release+0x11c/0x11c [ 857.095729][T21499] ? show_regs_print_info+0x12/0x12 [ 857.100893][T21499] ? __vmalloc_node_flags_caller+0x78/0x90 [ 857.106673][T21499] ? __do_sys_bpf+0x36e3/0xbed0 [ 857.111588][T21499] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.117628][T21499] ? kasan_alloc_pages+0x4a/0x60 [ 857.122542][T21499] should_fail+0x6fb/0x860 [ 857.126972][T21499] ? setup_fault_attr+0x3d0/0x3d0 [ 857.131971][T21499] __alloc_pages_nodemask+0x1ee/0x7c0 [ 857.137314][T21499] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 857.142836][T21499] ? __vmalloc_node_range+0x439/0x7b0 [ 857.148183][T21499] ? __vmalloc_node_range+0x439/0x7b0 [ 857.153522][T21499] ? __kmalloc+0xf7/0x2d0 [ 857.157820][T21499] ? __vmalloc_node_range+0x439/0x7b0 [ 857.163159][T21499] __vmalloc_node_range+0x360/0x7b0 [ 857.168329][T21499] ? htab_map_alloc+0x4f2/0x15b0 [ 857.173263][T21499] __vmalloc_node_flags_caller+0x78/0x90 [ 857.178915][T21499] ? htab_map_alloc+0x4f2/0x15b0 [ 857.184107][T21499] htab_map_alloc+0x4f2/0x15b0 [ 857.188852][T21499] __do_sys_bpf+0x36e3/0xbed0 [ 857.193588][T21499] ? _kstrtoull+0x38d/0x490 [ 857.198058][T21499] ? kstrtouint_from_user+0x22d/0x2b0 [ 857.203404][T21499] ? kstrtol_from_user+0x320/0x320 [ 857.208489][T21499] ? __kasan_slab_free+0x1f2/0x230 [ 857.213572][T21499] ? __bpf_prog_put_rcu+0x300/0x300 [ 857.218744][T21499] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 857.225126][T21499] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.231178][T21499] ? get_pid_task+0x86/0x90 [ 857.235891][T21499] ? proc_fail_nth_write+0x18f/0x250 [ 857.241146][T21499] ? proc_fail_nth_read+0x1d0/0x1d0 [ 857.246315][T21499] ? proc_fail_nth_read+0x1d0/0x1d0 [ 857.251482][T21499] ? memset+0x1f/0x40 [ 857.253872][ T3229] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 857.255437][T21499] ? fsnotify+0x13a0/0x1460 [ 857.255452][T21499] ? __kernel_write+0x340/0x340 [ 857.255462][T21499] ? __fsnotify_parent+0x310/0x310 [ 857.255476][T21499] ? security_file_permission+0x128/0x300 [ 857.283133][T21499] ? __sb_end_write+0xa4/0xf0 [ 857.287814][T21499] ? vfs_write+0x427/0x4f0 [ 857.292214][T21499] ? fput_many+0x42/0x1a0 [ 857.296529][T21499] do_syscall_64+0xcb/0x150 05:02:08 executing program 3 (fault-call:1 fault-nth:97): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 857.301031][T21499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.306894][T21499] RIP: 0033:0x45c829 [ 857.310759][T21499] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.323890][T12870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.330333][T21499] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.330342][T21499] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 857.330346][T21499] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 857.330351][T21499] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.330355][T21499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 857.330359][T21499] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 857.354592][T21501] FAULT_INJECTION: forcing a failure. [ 857.354592][T21501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.357302][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.366135][T21501] CPU: 0 PID: 21501 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 857.373676][T12870] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 857.381390][T21501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.381393][T21501] Call Trace: [ 857.381408][T21501] dump_stack+0x14a/0x1ce [ 857.381417][T21501] ? devkmsg_release+0x11c/0x11c [ 857.381424][T21501] ? show_regs_print_info+0x12/0x12 [ 857.381433][T21501] ? __vmalloc_node_flags_caller+0x78/0x90 [ 857.381441][T21501] ? __do_sys_bpf+0x36e3/0xbed0 [ 857.381453][T21501] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.480563][T21501] ? kasan_alloc_pages+0x4a/0x60 [ 857.485483][T21501] should_fail+0x6fb/0x860 [ 857.489885][T21501] ? setup_fault_attr+0x3d0/0x3d0 [ 857.494879][T21501] __alloc_pages_nodemask+0x1ee/0x7c0 [ 857.500222][T21501] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 857.503868][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 857.505740][T21501] ? __vmalloc_node_range+0x439/0x7b0 [ 857.516189][T21501] ? __kmalloc+0xf7/0x2d0 [ 857.520487][T21501] ? __vmalloc_node_range+0x439/0x7b0 [ 857.525827][T21501] __vmalloc_node_range+0x360/0x7b0 [ 857.530991][T21501] ? htab_map_alloc+0x4f2/0x15b0 [ 857.535893][T21501] __vmalloc_node_flags_caller+0x78/0x90 [ 857.541493][T21501] ? htab_map_alloc+0x4f2/0x15b0 [ 857.544386][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.546405][T21501] htab_map_alloc+0x4f2/0x15b0 [ 857.555494][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.560121][T21501] __do_sys_bpf+0x36e3/0xbed0 [ 857.570113][T12870] usb 3-1: Product: syz [ 857.572710][T21501] ? _kstrtoull+0x38d/0x490 [ 857.577406][T12870] usb 3-1: Manufacturer: syz [ 857.581305][T21501] ? kstrtouint_from_user+0x22d/0x2b0 [ 857.586383][T12870] usb 3-1: SerialNumber: syz [ 857.591196][T21501] ? kstrtol_from_user+0x320/0x320 [ 857.591203][T21501] ? __kasan_slab_free+0x1f2/0x230 [ 857.591214][T21501] ? __bpf_prog_put_rcu+0x300/0x300 [ 857.611086][T21501] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 857.617467][T21501] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.623509][T21501] ? get_pid_task+0x86/0x90 [ 857.627979][T21501] ? proc_fail_nth_write+0x18f/0x250 [ 857.633229][T21501] ? proc_fail_nth_read+0x1d0/0x1d0 [ 857.633867][ T3229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.638398][T21501] ? proc_fail_nth_read+0x1d0/0x1d0 [ 857.638404][T21501] ? memset+0x1f/0x40 [ 857.638416][T21501] ? fsnotify+0x13a0/0x1460 [ 857.649358][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 857.653619][T21501] ? __kernel_write+0x340/0x340 [ 857.659822][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 857.662055][T21501] ? __fsnotify_parent+0x310/0x310 [ 857.673726][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 857.677781][T21501] ? security_file_permission+0x128/0x300 [ 857.677789][T21501] ? __sb_end_write+0xa4/0xf0 [ 857.677796][T21501] ? vfs_write+0x427/0x4f0 [ 857.677807][T21501] ? fput_many+0x42/0x1a0 [ 857.692112][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 857.696074][T21501] do_syscall_64+0xcb/0x150 [ 857.696084][T21501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.696095][T21501] RIP: 0033:0x45c829 [ 857.703538][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:02:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x4000) 05:02:09 executing program 3 (fault-call:1 fault-nth:98): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 857.708343][T21501] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.708347][T21501] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.708356][T21501] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 857.708360][T21501] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 05:02:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x3, 0x8, 0x3, 0x2, 0xfffffffffffffffe, 0x9, 0x4, 0x4fffffff, 0x20}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) ioctl$FITHAW(r4, 0xc0045878) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') preadv(r5, &(0x7f0000000500), 0x0, 0x0) [ 857.708363][T21501] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.708372][T21501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 857.716762][ T3229] usb 1-1: config 0 descriptor?? [ 857.717404][T21501] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 857.754450][ T3229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 857.794171][T21509] FAULT_INJECTION: forcing a failure. [ 857.794171][T21509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.847094][T21509] CPU: 0 PID: 21509 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 857.857217][T21509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.867300][T21509] Call Trace: [ 857.870560][T21509] dump_stack+0x14a/0x1ce [ 857.874902][T21509] ? devkmsg_release+0x11c/0x11c [ 857.879816][T21509] ? show_regs_print_info+0x12/0x12 [ 857.885000][T21509] ? __vmalloc_node_flags_caller+0x78/0x90 [ 857.890792][T21509] ? __do_sys_bpf+0x36e3/0xbed0 [ 857.895630][T21509] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.901678][T21509] ? kasan_alloc_pages+0x4a/0x60 [ 857.906600][T21509] should_fail+0x6fb/0x860 [ 857.911002][T21509] ? setup_fault_attr+0x3d0/0x3d0 [ 857.916009][T21509] __alloc_pages_nodemask+0x1ee/0x7c0 [ 857.921366][T21509] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 857.926901][T21509] ? __vmalloc_node_range+0x439/0x7b0 [ 857.932261][T21509] ? __kmalloc+0xf7/0x2d0 [ 857.936580][T21509] ? __vmalloc_node_range+0x439/0x7b0 [ 857.941943][T21509] __vmalloc_node_range+0x360/0x7b0 [ 857.947135][T21509] ? htab_map_alloc+0x4f2/0x15b0 [ 857.952061][T21509] __vmalloc_node_flags_caller+0x78/0x90 [ 857.957677][T21509] ? htab_map_alloc+0x4f2/0x15b0 [ 857.962598][T21509] htab_map_alloc+0x4f2/0x15b0 [ 857.967350][T21509] __do_sys_bpf+0x36e3/0xbed0 [ 857.972009][T21509] ? _kstrtoull+0x38d/0x490 [ 857.976495][T21509] ? kstrtouint_from_user+0x22d/0x2b0 [ 857.981851][T21509] ? kstrtol_from_user+0x320/0x320 [ 857.987075][T21509] ? __kasan_slab_free+0x1f2/0x230 [ 857.992177][T21509] ? __bpf_prog_put_rcu+0x300/0x300 [ 857.997365][T21509] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 858.005065][T21509] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.011109][T21509] ? get_pid_task+0x86/0x90 [ 858.015594][T21509] ? proc_fail_nth_write+0x18f/0x250 [ 858.020848][T21509] ? proc_fail_nth_read+0x1d0/0x1d0 [ 858.026014][T21509] ? proc_fail_nth_read+0x1d0/0x1d0 [ 858.031194][T21509] ? memset+0x1f/0x40 [ 858.035321][T21509] ? fsnotify+0x13a0/0x1460 [ 858.039810][T21509] ? __kernel_write+0x340/0x340 [ 858.044636][T21509] ? __fsnotify_parent+0x310/0x310 [ 858.049723][T21509] ? security_file_permission+0x128/0x300 [ 858.055410][T21509] ? __sb_end_write+0xa4/0xf0 [ 858.060058][T21509] ? vfs_write+0x427/0x4f0 [ 858.064444][T21509] ? fput_many+0x42/0x1a0 [ 858.068763][T21509] do_syscall_64+0xcb/0x150 [ 858.073253][T21509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.079114][T21509] RIP: 0033:0x45c829 [ 858.083586][T21509] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:02:09 executing program 3 (fault-call:1 fault-nth:99): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 858.105511][T21509] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.113920][T21509] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 858.122047][T21509] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 858.129992][T21509] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 858.137935][T21509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 858.145880][T21509] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 858.168620][T21521] FAULT_INJECTION: forcing a failure. [ 858.168620][T21521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 858.182293][T21521] CPU: 0 PID: 21521 Comm: syz-executor.3 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 858.192418][T21521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.202459][T21521] Call Trace: [ 858.205729][T21521] dump_stack+0x14a/0x1ce [ 858.210028][T21521] ? devkmsg_release+0x11c/0x11c [ 858.215109][T21521] ? show_regs_print_info+0x12/0x12 [ 858.220274][T21521] ? __vmalloc_node_flags_caller+0x78/0x90 [ 858.226060][T21521] ? __do_sys_bpf+0x36e3/0xbed0 [ 858.230885][T21521] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.237015][T21521] ? kasan_alloc_pages+0x4a/0x60 [ 858.241928][T21521] should_fail+0x6fb/0x860 [ 858.246321][T21521] ? setup_fault_attr+0x3d0/0x3d0 [ 858.251325][T21521] __alloc_pages_nodemask+0x1ee/0x7c0 [ 858.256668][T21521] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 858.262192][T21521] ? __vmalloc_node_range+0x439/0x7b0 [ 858.267532][T21521] ? __vmalloc_node_range+0x439/0x7b0 [ 858.272871][T21521] ? __kmalloc+0xf7/0x2d0 [ 858.277180][T21521] ? __vmalloc_node_range+0x439/0x7b0 [ 858.282518][T21521] __vmalloc_node_range+0x360/0x7b0 [ 858.287692][T21521] ? htab_map_alloc+0x4f2/0x15b0 [ 858.292599][T21521] __vmalloc_node_flags_caller+0x78/0x90 [ 858.298210][T21521] ? htab_map_alloc+0x4f2/0x15b0 [ 858.303113][T21521] htab_map_alloc+0x4f2/0x15b0 [ 858.307844][T21521] __do_sys_bpf+0x36e3/0xbed0 [ 858.312487][T21521] ? _kstrtoull+0x38d/0x490 [ 858.316956][T21521] ? kstrtouint_from_user+0x22d/0x2b0 [ 858.322293][T21521] ? kstrtol_from_user+0x320/0x320 [ 858.327369][T21521] ? __kasan_slab_free+0x1f2/0x230 [ 858.332448][T21521] ? __bpf_prog_put_rcu+0x300/0x300 [ 858.337619][T21521] ? perf_trace_ext4_da_release_space+0x50a/0x5d0 [ 858.344000][T21521] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.350031][T21521] ? get_pid_task+0x86/0x90 [ 858.354504][T21521] ? proc_fail_nth_write+0x18f/0x250 [ 858.359754][T21521] ? proc_fail_nth_read+0x1d0/0x1d0 [ 858.364919][T21521] ? proc_fail_nth_read+0x1d0/0x1d0 [ 858.370088][T21521] ? memset+0x1f/0x40 [ 858.374048][T21521] ? fsnotify+0x13a0/0x1460 [ 858.378535][T21521] ? __kernel_write+0x340/0x340 [ 858.383353][T21521] ? __fsnotify_parent+0x310/0x310 [ 858.388434][T21521] ? security_file_permission+0x128/0x300 [ 858.394120][T21521] ? __sb_end_write+0xa4/0xf0 [ 858.398762][T21521] ? vfs_write+0x427/0x4f0 [ 858.403146][T21521] ? fput_many+0x42/0x1a0 [ 858.407445][T21521] do_syscall_64+0xcb/0x150 [ 858.411922][T21521] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.417785][T21521] RIP: 0033:0x45c829 [ 858.421650][T21521] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.441235][T21521] RSP: 002b:00007f4a917d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.449701][T21521] RAX: ffffffffffffffda RBX: 00000000004da360 RCX: 000000000045c829 [ 858.457640][T21521] RDX: 000000000000003c RSI: 0000000020000000 RDI: 0900000000000000 [ 858.465581][T21521] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 858.473519][T21521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 858.481458][T21521] R13: 000000000000005e R14: 00000000004c2fd3 R15: 00007f4a917d36d4 [ 858.933852][T12870] cdc_ncm 3-1:1.0: bind() failure [ 858.953797][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 858.973783][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 858.983666][T12870] usb 3-1: USB disconnect, device number 71 05:02:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd03"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1100) 05:02:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xcf00) 05:02:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x22) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x10001, @local, 0x8}, 0x1c) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="0952c549e6255f5efb8a23f762a8fbff52df99af894bab3a3947f21a40d52ce5384ea0c860ba6c71eb9fea7e457f63098729c4ef9f4ff8259bebdb810847070e83213b5c81f6bba49b940eff6b5e98"}], 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="240051be", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250400000008000200020000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) close(r3) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000000c0)=ANY=[@ANYBLOB="040061007c0500000081bbaad624e8ab57d79cb2f80e5da2d054148cdf4a2f21610d7ac52dacd429c773ce89b18412382140498c88779b604b1298e5fdf9ce42ec44ec7f8ccffdab54caef56be24a3ab553476b38124b8bbd5768ab987354c6c4d09000000"]) 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x580000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:11 executing program 0: ioperm(0x6, 0x6, 0x8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 859.790743][T12870] usb 1-1: USB disconnect, device number 102 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000002, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000003, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000004, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000005, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000006, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 859.903761][ T3229] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 860.253628][T12870] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 860.263773][ T3229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.274083][ T3229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.285185][ T3229] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.454136][ T3229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.474017][ T3229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.482001][ T3229] usb 3-1: Product: syz [ 860.487544][ T3229] usb 3-1: Manufacturer: syz [ 860.492138][ T3229] usb 3-1: SerialNumber: syz [ 860.496762][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 860.613840][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 860.624825][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.635901][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.645836][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 860.658976][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 860.665593][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 860.674619][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.683269][T12870] usb 1-1: config 0 descriptor?? [ 861.164256][T12870] elecom 0003:056E:00FF.0080: item fetching failed at offset 0/1 [ 861.172092][T12870] elecom: probe of 0003:056E:00FF.0080 failed with error -22 [ 861.365908][T13116] usb 1-1: USB disconnect, device number 103 [ 861.623610][ T3229] cdc_ncm 3-1:1.0: bind() failure [ 861.643647][ T3229] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 861.663597][ T3229] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 861.673340][ T3229] usb 3-1: USB disconnect, device number 72 05:02:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd03"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000007, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xe0, 0x2, 0x81, 0x0, 0x0, 0x3f, 0x20, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x100000000, 0xfff}, 0x9161, 0x200, 0xe360, 0x8, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)={0x20, 0x2, 0x7, 0x0, 0x0, [{{}, 0x8}, {{}, 0x7fffffff}, {{}, 0x80000000}, {{r0}, 0xffffffffffffffe4}, {{r1}, 0x9c60}, {{r0}, 0x4}, {{r2}, 0x3}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:02:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x100000) 05:02:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1200) 05:02:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000008, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000009, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000000a, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000000b, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000000c, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000000d, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 862.573459][T12870] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 862.583928][ T3229] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 862.843421][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 862.933509][T12870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.944733][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.956217][T12870] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.983545][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 862.994661][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.005878][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.015863][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 863.029050][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 863.035703][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 863.044871][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.053354][ T3229] usb 1-1: config 0 descriptor?? [ 863.123682][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.133895][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.141943][T12870] usb 3-1: Product: syz [ 863.146378][T12870] usb 3-1: Manufacturer: syz [ 863.151000][T12870] usb 3-1: SerialNumber: syz [ 863.513641][T21589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 863.593448][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 863.599398][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 863.607454][ T3229] usb 1-1: USB disconnect, device number 104 [ 864.283384][T12870] cdc_ncm 3-1:1.0: bind() failure [ 864.289091][ T3229] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 864.303394][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 864.323384][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 864.333086][T12870] usb 3-1: USB disconnect, device number 73 [ 864.533353][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 864.653365][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 864.664367][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.675993][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.686208][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 864.699628][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 864.706548][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 864.715836][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.724559][ T3229] usb 1-1: config 0 descriptor?? 05:02:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd03"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000000e, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7fff, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40), 0x0, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x40000000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x9, 0x4) write(r2, &(0x7f00000000c0)="db2184c46603d3842eb26a5e92693a4f528a30806f083e34d0cb03bdc75694011f1e50318c60cf384ae21dda4b6065248c14d1e60a5d47deebb8d15fbe5e37d105dad817e10831cba65f92f69cccfc3e8a8d416ad0011a4a12fa93bc0547a8cee97e3f8fdad9c2f7f63c15d2578155bf9c147bbbcb76f8c57be02dbd0875d14bddc41b3b8f5ec29f585cc58f733495b62c9d8612675dbc91cae6362b23ac45a224d3d722b7a8606a2b6ee693b74b331d51fd7a53aaaf394fa8d24b6a", 0xbc) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="70571ccf23ec0cc584c666e2052d8ff062920deec6517337d88eb4c5de441551deec946ce00a41241ac944e680827dc2427daaa5000003000000000040365e251a0368c1", 0x44}, {&(0x7f0000000200)="eb8adadebcb4e0e602d64418eb88c58794b3d9fcc5d76bfcd583c1f7bf297d6b834e80be55aa37a2d70991d8f0c9bf85ba88440279c2779a0cd06919e2a10de6ca5e9f19adf51ecb", 0x48}, {&(0x7f0000000340)="1e32d01fa8839e4a7212c434ad93eb0fb7138ebc5b1c14088c75052b7b0d96eabe1e4c72e4c32d741bce6a8a18ce7a8ce15229872b654c78642a4cc9ee38e2f099350f969f02f22a916a4a787c03f9", 0x4f}, {&(0x7f0000000900)="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", 0x1000}], 0x4, 0x8) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:02:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xf0ff7f) 05:02:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2500) 05:02:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, r3, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_SETUP={0x38, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x15}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, "61dc0294b663ee16cfd3c2ee8a70af97affe03c4c6eb8b"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, [@NL80211_TXRATE_HT={0x1b, 0x2, "3336c05783d6629a77aac6632902f574aefb4038497c13"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, "db43738154b20a32f42bfbba1b4baf5564469f9c8d0a34d70cbdd7b16ab72f3d92f9ae755a072b5bd25176a579a03ac1b64dfe683b0ed711ea0868"}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1c}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff48}, @NL80211_MESHCONF_FORWARDING={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x4}, @NL80211_ATTR_MESH_ID={0x4e, 0x18, "3037cbb52751c56c0a89eaac3381ac078937d1cbafd0f1d8e3a3600649dc07fffe12e8a89566fc07d12e11105e4da9f4e7e4962e8faee874ac1696112c88b57036137c1682decd529f75"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x184}, 0x1, 0x0, 0x0, 0x40800}, 0x404a000) 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000000f, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000010, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000011, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 864.963716][T21628] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000012, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000013, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000014, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 865.063352][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 865.069331][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 865.077241][ T3229] usb 1-1: USB disconnect, device number 105 [ 865.263245][T12870] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 865.433230][ T3229] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 865.623261][T12870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.633442][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.644927][T12870] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.683250][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 865.803327][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 865.814530][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.823622][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.839013][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.858802][T12870] usb 3-1: Product: syz [ 865.863660][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.873828][T12870] usb 3-1: Manufacturer: syz [ 865.878394][T12870] usb 3-1: SerialNumber: syz [ 865.883822][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 865.897517][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.906769][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 865.915840][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.924354][ T3229] usb 1-1: config 0 descriptor?? [ 866.403799][ T3229] elecom 0003:056E:00FF.0081: item fetching failed at offset 0/1 [ 866.411587][ T3229] elecom: probe of 0003:056E:00FF.0081 failed with error -22 [ 866.605243][ T3229] usb 1-1: USB disconnect, device number 106 [ 867.033162][T12870] cdc_ncm 3-1:1.0: bind() failure [ 867.053195][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 867.073223][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 867.080521][T12870] usb 3-1: USB disconnect, device number 74 [ 867.383087][T13116] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 867.623063][T13116] usb 1-1: Using ep0 maxpacket: 16 05:02:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000015, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000140)=@req={0x1, 0x3, 0x927, 0xffff}, 0x10) setsockopt$sock_int(r5, 0x1, 0x19, 0x0, 0x0) close(r5) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20200, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="f676000086000000ff7f0000e3ffffff007600000000c824"]) 05:02:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x1000000) 05:02:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000) [ 867.753144][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 867.764148][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.775927][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.785865][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 867.799008][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 867.806134][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 867.815526][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.836458][T13116] usb 1-1: config 0 descriptor?? 05:02:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000008a2be138986aea00106e05ff004000000000010902240001000000000904008980030100000921000046102201000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000016, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000017, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000001d, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000030, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000011c, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000011e, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 868.013052][ T3212] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 868.083125][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 868.089196][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 868.097845][T13116] usb 1-1: USB disconnect, device number 107 [ 868.373068][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.384073][ T3212] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.453042][T13116] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 868.553090][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.562124][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.570770][ T3212] usb 3-1: Product: syz [ 868.575380][ T3212] usb 3-1: Manufacturer: syz [ 868.580016][ T3212] usb 3-1: SerialNumber: syz [ 868.722990][T13116] usb 1-1: device descriptor read/64, error 18 [ 869.112958][T13116] usb 1-1: device descriptor read/64, error 18 [ 869.382935][T13116] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 869.652952][T13116] usb 1-1: device descriptor read/64, error 18 [ 869.722960][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 869.742965][ T3212] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 869.762942][ T3212] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 869.770403][ T3212] usb 3-1: USB disconnect, device number 75 [ 870.042870][T13116] usb 1-1: device descriptor read/64, error 18 [ 870.162968][T13116] usb usb1-port1: attempt power cycle 05:02:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000180, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x3829010, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x3}}], [{@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'selinuxwlan1eth0ppp1-eth0'}}, {@measure='measure'}, {@permit_directio='permit_directio'}]}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:02:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x2000000) 05:02:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x100000) [ 870.672838][T12870] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 870.882834][T13116] usb 1-1: new high-speed USB device number 110 using dummy_hcd 05:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x9000000000002e0, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000300, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 870.972906][T13116] usb 1-1: Invalid ep0 maxpacket: 43 05:02:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff004000000000010902240001000000000904008980030104000921000000012201fa090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x8, 0x8, 0x7ff, 0x1000}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) close(r1) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f0000000200)=0x28) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r4, 0x0, 0xb, &(0x7f00000000c0)='net/packet\x00', r7}, 0x30) r9 = syz_open_procfs(r8, &(0x7f0000000040)='net/packet\x00') ioctl$HIDIOCGVERSION(r9, 0x80044801, &(0x7f0000000080)) 05:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x9000000000003fc, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000500, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000600, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 871.032935][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.044277][T12870] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 871.213011][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.222237][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.240138][T12870] usb 3-1: Product: syz [ 871.246477][T12870] usb 3-1: Manufacturer: syz [ 871.251121][T12870] usb 3-1: SerialNumber: syz [ 871.352816][T13116] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 871.442842][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 871.572874][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 871.583826][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.594847][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.604758][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 871.617873][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 871.624483][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 871.633511][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.642094][T13116] usb 1-1: config 0 descriptor?? [ 871.683271][T13116] usbhid 1-1:0.0: can't add hid device: -22 [ 871.689230][T13116] usbhid: probe of 1-1:0.0 failed with error -22 [ 872.372800][T12870] cdc_ncm 3-1:1.0: bind() failure [ 872.392761][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 872.412785][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 872.422571][T12870] usb 3-1: USB disconnect, device number 76 05:02:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000700, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) pidfd_open(r0, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:02:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x3000000) 05:02:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xf0ff7f) 05:02:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000900, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000a00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000b00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 873.332634][T13116] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 873.692676][T13116] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.703685][T13116] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 873.872732][T13116] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.881872][T13116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.890297][T13116] usb 3-1: Product: syz [ 873.894533][T13116] usb 3-1: Manufacturer: syz [ 873.899159][T13116] usb 3-1: SerialNumber: syz 05:02:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0, 0xc}], 0x1}}, {{&(0x7f00000002c0)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/25, 0x19}], 0x2, &(0x7f0000000600)=""/126, 0x7e}, 0x1f}], 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) keyctl$set_timeout(0xf, r5, 0x101) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRES16], 0x10b0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000240)='maps\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:02:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000c00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x4000000) 05:02:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x4, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 874.043872][ T3212] usb 1-1: USB disconnect, device number 111 [ 874.462562][ T3212] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 874.712529][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 874.832602][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 874.843597][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.855448][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.866886][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 874.881239][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 874.889022][ T3212] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 874.899014][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.909571][ T3212] usb 1-1: config 0 descriptor?? [ 875.012563][T13116] cdc_ncm 3-1:1.0: bind() failure [ 875.032565][T13116] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 875.052589][T13116] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 875.062357][T13116] usb 3-1: USB disconnect, device number 77 [ 875.393335][ T3212] wacom 0003:056A:0041.0082: item fetching failed at offset 0/1 [ 875.401049][ T3212] wacom 0003:056A:0041.0082: parse failed [ 875.406821][ T3212] wacom: probe of 0003:056A:0041.0082 failed with error -22 [ 875.593797][ T3212] usb 1-1: USB disconnect, device number 112 05:02:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd03000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1000000) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000d00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x41) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x9) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000900)="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", 0x1000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:02:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x5000000) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000e00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000f00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001100, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001200, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001300, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001400, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 875.982423][T12870] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 876.342464][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.353393][T12870] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.363630][T12870] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 876.372392][ T3212] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 876.532603][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.541731][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.549766][T12870] usb 3-1: Product: syz [ 876.554018][T12870] usb 3-1: Manufacturer: syz [ 876.558746][T12870] usb 3-1: SerialNumber: syz [ 876.632376][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 876.772464][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 876.783417][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.794442][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.804354][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 876.817548][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 876.824170][ T3212] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 876.833386][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.841903][ T3212] usb 1-1: config 0 descriptor?? 05:02:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x1) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000040), 0x0, 0x0) [ 877.142386][ T3212] usbhid 1-1:0.0: can't add hid device: -71 [ 877.148373][ T3212] usbhid: probe of 1-1:0.0 failed with error -71 [ 877.155657][ T3212] usb 1-1: USB disconnect, device number 113 [ 877.682339][T12870] cdc_ncm 3-1:1.0: bind() failure [ 877.702349][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 877.722338][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 877.732095][T12870] usb 3-1: USB disconnect, device number 78 05:02:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd03000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001500, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x6000000) 05:02:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2000000) 05:02:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x1c, 0x0, 0x1d0, &(0x7f00000003c0)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = dup(r3) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000040)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') 05:02:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x0, 0x3) recvmmsg(r0, &(0x7f0000001c40), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001600, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001700, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001c01, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001d00, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000001e01, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000002000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 878.652213][T12870] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 878.652219][ T3212] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 878.892196][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 879.012271][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 879.022270][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.023266][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.034118][T12870] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.046624][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.054768][T12870] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 879.065591][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 879.087436][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 879.094100][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 879.103180][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.111703][ T3212] usb 1-1: config 0 descriptor?? [ 879.232261][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.241478][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.249525][T12870] usb 3-1: Product: syz [ 879.253748][T12870] usb 3-1: Manufacturer: syz [ 879.258309][T12870] usb 3-1: SerialNumber: syz [ 879.592745][ T3212] elecom 0003:056E:00FF.0083: item fetching failed at offset 0/1 [ 879.600582][ T3212] elecom: probe of 0003:056E:00FF.0083 failed with error -22 [ 879.933311][ T3212] usb 1-1: USB disconnect, device number 114 [ 880.382140][T12870] cdc_ncm 3-1:1.0: bind() failure [ 880.402157][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 880.422125][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 880.429700][T12870] usb 3-1: USB disconnect, device number 79 [ 880.702067][ T3229] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 880.942044][ T3229] usb 1-1: Using ep0 maxpacket: 16 05:02:32 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd03000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000003000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x101, 0x9, 0x1, 0x800, 0xcc7, 0x401, 0x50}, 0x1c) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x218, 0x0, 0xe0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0xff000000, 'hsr0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x4, 0x3}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x4, "5a7f", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x1, [0x7, 0x4, 0x4, 0x2, 0x0, 0x4], 0x1}}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x200, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x2, 0x1, 0x5, 0x3, 0x5], 0x3, 0x4}, {0x4, [0x4, 0x0, 0x1, 0x2, 0x0, 0x2], 0x5, 0x2}}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xff, 0xff000000, 'syzkaller1\x00', 'gre0\x00', {}, {}, 0x2e, 0x2, 0x38}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0x6, 0x4, 0x2}, {0x7, 0xc0, 0x5, 0x200}, {0x1, 0x9e, 0x1f, 0x8}]}, 0x10) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000240)="b3c3f9dac56cc4321534c44b3dfe191228d59177a2bfcd6fe0baa939a37795de70aebac5b8a02df299da0f30ba17d830aae594d859d37ddfbe6321c057758d85d89b57bc52ea9a5e67b1c62d3b7143834d2c51533f42c7661b3e5b111c627cce2fffd37f0820586454c9b46a411227c509773df2d6336afb", 0x78}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:02:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7000000) [ 881.062092][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 881.073113][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.087975][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.098464][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 881.112184][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 881.118865][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 881.128334][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.137355][ T3229] usb 1-1: config 0 descriptor?? 05:02:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x3000000) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000004000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000e002, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 881.352043][ T3212] usb 3-1: new high-speed USB device number 80 using dummy_hcd 05:02:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) socket(0xb, 0x5, 0x6) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7d3, @private1={0xfc, 0x1, [], 0x1}, 0x8}}, 0x0, 0x0, 0x4a, 0x0, "65219696ef41a7be208220ebdc252aa2578d6704c67dd64169996964688db7e4d669332db11c06021a18f63d101d8e6f1bdc1947337535efcee51f1948e6a3b89b02236f66443ff4869ec23eda30d610"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000002000000020065ece5cebc7b162fd2c552e07ff3c2eae6848d310c3375dd454f6a3879cd28202449e4a68915d3058b91633709eaffcaeae0623ee3aa504aeeb88e9fe550bc344a09f6ca13da1f42fb3e7f3db73df53bd6e9a31c3ac2d049b80bfc3ca45c987ce74eaf7ec28e68c0ddecfbabf3a81848a784367cda52f8c21b498bff4b1b831692bd2829db9e45ca7ab3afa8bdacf1830240ce4aadd76cb3f93decc7fc5e161b95cbb58143ccf304290820cd8446232c7c2e63a6"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) clone3(&(0x7f0000000600)={0x40000, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000300), {0x3f}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f0000000340)=""/60, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r8], 0x8}, 0x50) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000000fc03, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000101000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000200000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000202000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 881.462096][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 881.468113][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 881.476342][ T3229] usb 1-1: USB disconnect, device number 115 [ 881.742040][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.752981][ T3212] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 881.762843][ T3212] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 881.832008][ T3229] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 881.942337][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.951373][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.959364][ T3212] usb 3-1: Product: syz [ 881.963569][ T3212] usb 3-1: Manufacturer: syz [ 881.968140][ T3212] usb 3-1: SerialNumber: syz [ 882.071969][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 882.201992][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 882.213014][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.224357][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.234402][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 882.247677][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 882.254312][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 882.263341][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.271810][ T3229] usb 1-1: config 0 descriptor?? [ 882.752519][ T3229] elecom 0003:056E:00FF.0084: item fetching failed at offset 0/1 [ 882.760361][ T3229] elecom: probe of 0003:056E:00FF.0084 failed with error -22 [ 882.953785][ T3229] usb 1-1: USB disconnect, device number 116 [ 883.121922][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 883.141965][ T3212] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 883.161960][ T3212] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 883.169333][ T3212] usb 3-1: USB disconnect, device number 80 05:02:35 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000300000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:02:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x8000000) 05:02:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000000) [ 883.761833][ T3212] usb 1-1: new high-speed USB device number 117 using dummy_hcd 05:02:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000400000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000402001, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 884.001812][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 884.091811][ T3229] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 884.121879][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 884.132951][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.144836][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.155287][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 884.168923][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 884.176015][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 884.185728][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.196612][ T3212] usb 1-1: config 0 descriptor?? 05:02:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0xff, 0x0, 0xff, 0xb, 0x2, 0xe7f9}, &(0x7f0000000140)=0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000040)={0x6, 0x20}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000080ffff, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:02:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000001000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000001204000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 884.481872][ T3229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.521869][ T3212] usbhid 1-1:0.0: can't add hid device: -71 [ 884.527859][ T3212] usbhid: probe of 1-1:0.0 failed with error -71 [ 884.537174][ T3212] usb 1-1: USB disconnect, device number 117 [ 884.661844][ T3229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.670937][ T3229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.679224][ T3229] usb 3-1: Product: syz [ 884.683416][ T3229] usb 3-1: Manufacturer: syz [ 884.688095][ T3229] usb 3-1: SerialNumber: syz [ 884.891793][ T3212] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 885.141726][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 885.271788][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 885.282805][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.293836][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.303787][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 885.316947][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 885.323573][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 885.332604][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.341146][ T3212] usb 1-1: config 0 descriptor?? [ 885.391739][ T3229] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 885.397939][ T3229] cdc_ncm 3-1:1.0: bind() failure [ 885.442057][ T3229] cdc_ncm 3-1:1.1: bind() failure [ 885.450630][ T3229] usb 3-1: USB disconnect, device number 81 [ 885.812342][ T3212] elecom 0003:056E:00FF.0085: item fetching failed at offset 0/1 [ 885.820322][ T3212] elecom: probe of 0003:056E:00FF.0085 failed with error -22 [ 886.013149][ T3212] usb 1-1: USB disconnect, device number 118 05:02:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000002000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x9000000) 05:02:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80000) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x44) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = clone3(&(0x7f0000000340)={0x1100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x20}, &(0x7f0000000200)=""/189, 0xbd, &(0x7f0000000140)=""/15, &(0x7f0000000180)=[r4], 0x1}, 0x50) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:02:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x5000000) 05:02:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000003000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000004000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 886.371631][ T3212] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 886.731728][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.791607][ T3229] usb 1-1: new high-speed USB device number 119 using dummy_hcd 05:02:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000005000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000040)) 05:02:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x2990478f4684bf5c, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x924}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x0, 0xc6}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000006000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000007000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 886.902025][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.932942][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.947272][ T3212] usb 3-1: Product: syz [ 886.951530][ T3212] usb 3-1: Manufacturer: syz [ 886.956341][ T3212] usb 3-1: SerialNumber: syz [ 887.268814][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 887.402165][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 887.413333][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.424489][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.434424][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 2 endpoint descriptors, different from the interface descriptor's value: 128 [ 887.447652][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 887.454260][ T3229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 887.463292][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.471877][ T3229] usb 1-1: config 0 descriptor?? [ 887.661581][ T3212] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 887.667606][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 887.711903][ T3212] cdc_ncm 3-1:1.1: bind() failure [ 887.720001][ T3212] usb 3-1: USB disconnect, device number 82 [ 888.221558][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 888.227520][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 888.235121][ T3229] usb 1-1: USB disconnect, device number 119 05:02:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xa000000) 05:02:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000008000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x6000000) 05:02:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0xa, 0x40) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x40, 0xffffff80, 0x3, 0x6070, 0x8, 0x1ff, 0x2, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x20000040, 0x4, 0x3, 0x0, 0x4, 0x100000000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r5 = dup3(r4, r1, 0x0) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000500)=""/33, 0x21}], 0x4, 0x40) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = fcntl$dupfd(r2, 0x0, r5) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000104010200000000000000000c000008080003400000b8a5080004400000000108000540800000000a00020000000002000000000800034000000000000000080100000006000640000100000000804000020000f91c7dd35615a41fd574c2794d805d8acc533a2b3c313408d7cbf611675d979142ce4efa89301ee41bcdd6ee9a9b054f49b7a761e29de00448bc280b40f7100fbe8644851826cec762"], 0x64}, 0x1, 0x0, 0x0, 0x8804}, 0x4000) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000200)) 05:02:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000009000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000a000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000b000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000c000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 888.621462][ T3212] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 888.931442][ T3229] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 888.981515][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.151523][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.160769][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.168812][ T3212] usb 3-1: Product: syz [ 889.173250][ T3212] usb 3-1: Manufacturer: syz [ 889.177996][ T3212] usb 3-1: SerialNumber: syz [ 889.181433][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 889.301515][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 889.312585][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.326815][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.337312][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 2 endpoint descriptors, different from the interface descriptor's value: 128 [ 889.350989][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 889.358120][ T3229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 889.367452][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.376191][ T3229] usb 1-1: config 0 descriptor?? 05:02:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007500)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/130, 0x82}], 0x8, &(0x7f0000000740)=""/227, 0xe3}, 0x80000000}, {{&(0x7f0000000840)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001900)=""/183, 0xb7}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/233, 0xe9}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000004c80)=""/135, 0x87}, {&(0x7f0000004d40)=""/133, 0x85}, {&(0x7f0000004e00)=""/252, 0xfc}], 0x9, &(0x7f0000004fc0)=""/205, 0xcd}, 0x5}, {{&(0x7f00000050c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000005140)=""/240, 0xf0}], 0x1}, 0xfffffff7}, {{&(0x7f0000005240)=@isdn, 0x80, &(0x7f0000005640)=[{&(0x7f00000052c0)=""/230, 0xe6}, {&(0x7f0000001c00)=""/4, 0x4}, {&(0x7f00000053c0)=""/186, 0xba}, {&(0x7f0000005480)=""/132, 0x84}, {&(0x7f0000005540)=""/228, 0xe4}], 0x5, &(0x7f00000056c0)=""/147, 0x93}, 0xe19}, {{&(0x7f0000005780)=@tipc, 0x80, &(0x7f0000005900)=[{&(0x7f0000005800)=""/26, 0x1a}, {&(0x7f0000005840)=""/166, 0xa6}], 0x2, &(0x7f0000005940)=""/156, 0x9c}, 0x401ac800}, {{&(0x7f0000005a00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005a80)=""/13, 0xd}, {&(0x7f0000005ac0)=""/184, 0xb8}, {&(0x7f0000005b80)=""/246, 0xf6}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/158, 0x9e}], 0x5, &(0x7f0000006dc0)=""/133, 0x85}, 0x638}, {{&(0x7f0000006e80)=@ipx, 0x80, &(0x7f00000073c0)=[{&(0x7f0000006f00)=""/200, 0xc8}, {&(0x7f0000007000)=""/199, 0xc7}, {&(0x7f0000007100)=""/18, 0x12}, {&(0x7f0000007140)=""/42, 0x2a}, {&(0x7f0000007180)=""/179, 0xb3}, {&(0x7f0000007240)=""/241, 0xf1}, {&(0x7f0000007340)=""/70, 0x46}], 0x7, &(0x7f0000007440)=""/172, 0xac}, 0x1}], 0x7, 0x140, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000077c0)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) preadv(r4, &(0x7f0000007780)=[{&(0x7f00000076c0)=""/150, 0x96}], 0x1, 0x5384) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:02:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000d000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xb000000) [ 889.882332][ T3212] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 889.888500][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 889.931453][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 889.931817][ T3212] cdc_ncm 3-1:1.1: bind() failure [ 889.937440][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 889.944019][ T3212] usb 3-1: USB disconnect, device number 83 [ 889.993088][ T3229] usb 1-1: USB disconnect, device number 120 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000e000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7000000) 05:02:42 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1af5ef04f24731f2c060d7f7795993354b32e165cbe049a2f8d4cb0baf48ba8a8d24a25bf5f947d2a2fb747f57b749cf9c62d9a5ff32da239f3b62d2e25f348b729db5ccf8a803713243c1d488c4e500fdf32076c48dad9c", @ANYRES16=r2, @ANYBLOB='\x00'/10], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x374, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40762eba}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a9a599a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56867c42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a3a07e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33174102}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bcaeb74}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x771de880}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c76f783}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb48324}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4754a19d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b652e0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaf1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56da8f40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xded1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7feb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3101}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ca79d3d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x667dc525}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a36a313}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bd9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x831e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4437d149}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44b53fee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x805d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee8ca27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11aa9f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0a6ea6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7408}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e81}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f67d44d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a2e814d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x952d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41257463}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1eb7}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28cbe405}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c08a5e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1074e21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5044}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e120660}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1924d67e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x598652b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x400c6876}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x377e14b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a5170cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6597f781}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ea7ab43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24624c40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3339d89}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x233569b3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3abc0b44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e787532}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39de2e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa7ed942}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21e12adc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x374}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0xfffffffe}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000440)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f00000000c0)="17d2e6b6044d0714c9b16701770a7c3f56f6cbd4295e868fcb24a57dc46fcb197a7ae46d0a14d148b576c35b4d310395b59fd4bca9ba8027ecf6c80bb7f1fe995978c01ee01a0e95fdfcaf4e399e70616c6b0ad8e9661fa37f920e389cbf8df7c041f5346e13e9e3ceaa728de075e7cbd3c44d1b1023f13d97b12b851073816ce299939fe2cd89ea87a8acdacfbfdb7f1336e644c3f6ac557b57cf44dce15d9851f3fd76e90b0103bbe0294bd4b76ee0e2dfbfb7fbacb644d611f9f4848fb5c7a13504ed97320d011509b709eff919655065b35c13f4dc92586774849c5e4a3ae3583c1ef2765879b2e69989b3", &(0x7f0000000200)=""/126, &(0x7f0000000340)="47a8f63349a1a4dc4618e0725a32eced8c6feb0e608c0e59c6768a00a750017eec09d69e8abf21852811a58e189af8118352873fea1a5b5fa27a89313b832b75f9f6470be057aa81f8aa3479194525b36740dd95cd2d84563d13ea19a228b84648f7c1a2c1f35e402badf3b5ccefe56e3daf9419cd2c1761c896ca597247c554af041c3686d9103c5a23641f16d971a1bd0285c067d08e59ec5bee956496aa842813a0f12448a10cd6e8ea037e9f162abd9a4076a0778f68c7e8775456fd", &(0x7f0000000040)="f3d3c99356403bce5c2d72dd45e1b9437a7ab60e2c", 0xffff0001, r3, 0x4}, 0x38) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:02:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000000f000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000010000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000011000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000012000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000013000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000014000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 890.613665][T22178] device lo entered promiscuous mode [ 890.623208][T22178] Y­4`Ò˜: renamed from lo 05:02:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xc000000) 05:02:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000015000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 890.871341][ T3229] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 890.931308][ T3212] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 891.181282][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 891.241364][ T3229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.301313][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 891.312381][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.324006][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.334264][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 891.347709][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 891.354670][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 891.363983][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.372752][ T3212] usb 1-1: config 0 descriptor?? [ 891.431347][ T3229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.440560][ T3229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.448928][ T3229] usb 3-1: Product: syz [ 891.453217][ T3229] usb 3-1: Manufacturer: syz [ 891.457832][ T3229] usb 3-1: SerialNumber: syz 05:02:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x8000000) [ 891.851851][ T3212] elecom 0003:056E:00FF.0086: item fetching failed at offset 0/1 [ 891.859649][ T3212] elecom: probe of 0003:056E:00FF.0086 failed with error -22 [ 892.091571][ T3212] usb 1-1: USB disconnect, device number 121 [ 892.171243][ T3229] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 892.177327][ T3229] cdc_ncm 3-1:1.0: bind() failure [ 892.221528][ T3229] cdc_ncm 3-1:1.1: bind() failure [ 892.229943][ T3229] usb 3-1: USB disconnect, device number 84 [ 892.861158][ T3229] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 893.101170][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 893.221202][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 893.232170][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.243886][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.254140][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 893.267772][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 893.274722][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 893.284097][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.292922][ T3229] usb 1-1: config 0 descriptor?? 05:02:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1e502d400000000001090224000100000000090400a98003010100092100008001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0xffff, 0x81, 0x1, 0x1}, {0xb04e, 0x7, 0xd4, 0x3}, {0x80, 0x6, 0x98, 0x1}, {0x5c9a, 0x6, 0x1, 0x80}, {0x7, 0x28, 0x1, 0xffff}]}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000016000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xd000000) [ 893.591743][ T3229] elecom 0003:056E:00FF.0087: item fetching failed at offset 0/1 [ 893.599645][ T3229] elecom: probe of 0003:056E:00FF.0087 failed with error -22 [ 893.609514][ T3229] usb 1-1: USB disconnect, device number 122 05:02:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) socket$netlink(0x10, 0x3, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:02:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x8010000) 05:02:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000017000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000001c010000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000001d000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x90000001e010000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000040000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000080010000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 893.941074][ T3212] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 894.061059][ T3229] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 894.301032][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 894.301112][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.421073][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 169: 128, using maximum allowed: 30 [ 894.437210][ T3229] usb 1-1: config 0 interface 0 altsetting 169 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.461488][ T3229] usb 1-1: config 0 interface 0 altsetting 169 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.481205][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.490428][ T3229] usb 1-1: config 0 interface 0 altsetting 169 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 894.494722][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.531015][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 894.531032][ T3212] usb 3-1: Product: syz [ 894.537631][ T3229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 894.553801][ T3212] usb 3-1: Manufacturer: syz [ 894.562102][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.562798][ T3212] usb 3-1: SerialNumber: syz [ 894.576458][ T3229] usb 1-1: config 0 descriptor?? [ 895.061841][ T3229] kovaplus 0003:1E7D:2D50.0088: item fetching failed at offset 0/1 [ 895.075570][ T3229] kovaplus 0003:1E7D:2D50.0088: parse failed [ 895.089882][ T3229] kovaplus: probe of 0003:1E7D:2D50.0088 failed with error -22 [ 895.264309][T13116] usb 1-1: USB disconnect, device number 123 [ 895.291031][ T3212] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 895.298181][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 895.341246][ T3212] cdc_ncm 3-1:1.1: bind() failure [ 895.358570][ T3212] usb 3-1: USB disconnect, device number 85 [ 896.031007][ T3212] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 896.270952][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 896.390960][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 169: 128, using maximum allowed: 30 [ 896.401936][ T3212] usb 1-1: config 0 interface 0 altsetting 169 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.413625][ T3212] usb 1-1: config 0 interface 0 altsetting 169 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.423856][ T3212] usb 1-1: config 0 interface 0 altsetting 169 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 896.437336][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.444288][ T3212] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 896.453619][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.462399][ T3212] usb 1-1: config 0 descriptor?? 05:02:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xe000000) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x9000000e0020000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x9000000) 05:02:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c00000000000000000000070000000000000000189241574cc3e2bb752645eb66f50171f604a2531f3270c15eae5d9f333c358d9f0e95f9a1bbac0760e7214d0605f9561e14a00089a509601c5565c9", @ANYRES32=0x0, @ANYBLOB="db80833c000000002800128008000100736974001c00028008000200ac1414bb08000300ffffffff0600080000000000080004000100010008000a00", @ANYRES32=r3, @ANYBLOB="0f0022006f7bae0cb7cfefc20ca1710008001300", @ANYRES32=0x0, @ANYBLOB="05002100080000001400350069705f76746930000000000000000000"], 0x8c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006d40)={&(0x7f0000006340)={0xa00, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xd52}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x4, 0x7, 0xf7, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x64b}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x64c}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 05:02:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:48 executing program 0: r0 = syz_usb_connect$hid(0x3, 0xffffffffffffffb8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6085, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r2 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x9000000fc030000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x9000000ffff8000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x2, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x4, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x5, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 896.740962][ T3212] usbhid 1-1:0.0: can't add hid device: -71 [ 896.746929][ T3212] usbhid: probe of 1-1:0.0 failed with error -71 [ 896.768058][ T3212] usb 1-1: USB disconnect, device number 124 [ 896.950886][T13116] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 897.150887][ T3212] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 897.320890][T13116] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.390884][ T3212] usb 1-1: Using ep0 maxpacket: 16 05:02:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x10000000) 05:02:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 897.490990][T13116] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.500247][T13116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.510370][T13116] usb 3-1: Product: syz [ 897.515901][T13116] usb 3-1: Manufacturer: syz [ 897.520579][T13116] usb 3-1: SerialNumber: syz 05:02:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xa000000) 05:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x8, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 897.550906][ T3212] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 897.558840][ T3212] usb 1-1: can't read configurations, error -22 [ 897.720806][ T3212] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 897.980776][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 898.140784][ T3212] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 898.148902][ T3212] usb 1-1: can't read configurations, error -22 [ 898.155812][ T3212] usb usb1-port1: attempt power cycle [ 898.210807][T13116] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 898.216844][T13116] cdc_ncm 3-1:1.0: bind() failure [ 898.261099][T13116] cdc_ncm 3-1:1.1: bind() failure [ 898.266973][T13116] usb 3-1: USB disconnect, device number 86 05:02:50 executing program 4: getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400800, 0x0) pread64(r1, &(0x7f00000000c0)=""/62, 0x3e, 0x10000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 898.870751][ T3212] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 898.970717][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 899.130753][ T3212] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 899.138714][ T3212] usb 1-1: can't read configurations, error -22 [ 899.290679][ T3212] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 899.380737][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 899.540727][ T3212] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 899.548772][ T3212] usb 1-1: can't read configurations, error -22 [ 899.555711][ T3212] usb usb1-port1: unable to enumerate USB device 05:02:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0x0, 0x2, {0xffffffe6}}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="e7ff010000000200"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:02:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x11000000) 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x9, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb000000) 05:02:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x200) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) fcntl$setstatus(r4, 0x4, 0x0) 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0xa, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 899.970606][T12870] usb 3-1: new high-speed USB device number 87 using dummy_hcd 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x14, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x19, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1d, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x580, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1900, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 900.150587][ T3212] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 900.360662][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.400578][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 900.520656][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 900.531740][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.543328][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.550627][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.553802][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 900.562489][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.576621][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 900.585232][T12870] usb 3-1: Product: syz [ 900.591237][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 900.595000][T12870] usb 3-1: Manufacturer: syz [ 900.605618][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.609893][T12870] usb 3-1: SerialNumber: syz [ 900.623798][ T3212] usb 1-1: config 0 descriptor?? [ 901.111136][ T3212] elecom 0003:056E:00FF.0089: item fetching failed at offset 0/1 [ 901.118984][ T3212] elecom: probe of 0003:056E:00FF.0089 failed with error -22 [ 901.312155][T22399] usb 1-1: USB disconnect, device number 3 [ 901.350586][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 901.356603][T12870] cdc_ncm 3-1:1.0: bind() failure [ 901.400812][T12870] cdc_ncm 3-1:1.1: bind() failure [ 901.408817][T12870] usb 3-1: USB disconnect, device number 87 [ 902.080465][T12870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 902.320459][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 902.440496][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 902.451474][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.463113][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.473382][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 902.486848][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 902.493741][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 902.503066][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.511852][T12870] usb 1-1: config 0 descriptor?? 05:02:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x8005, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc000000) 05:02:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x12000000) 05:02:54 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = open(0x0, 0x141142, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x0, r1, 0x0) accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40090) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x2, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x3, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x104, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x580, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x801, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x1101, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 902.790483][T12870] usbhid 1-1:0.0: can't add hid device: -71 [ 902.796550][T12870] usbhid: probe of 1-1:0.0 failed with error -71 [ 902.817690][T12870] usb 1-1: USB disconnect, device number 4 [ 902.970390][ T3212] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 903.210374][T12870] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 903.330454][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.450359][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 903.500481][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.509595][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.520037][ T3212] usb 3-1: Product: syz [ 903.524935][ T3212] usb 3-1: Manufacturer: syz [ 903.529605][ T3212] usb 3-1: SerialNumber: syz [ 903.590436][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 903.601487][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.618604][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.628528][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 903.641644][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 903.648321][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 903.657357][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.665916][T12870] usb 1-1: config 0 descriptor?? [ 904.150923][T12870] elecom 0003:056E:00FF.008A: item fetching failed at offset 0/1 [ 904.158747][T12870] elecom: probe of 0003:056E:00FF.008A failed with error -22 [ 904.230338][ T3212] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 904.236357][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 904.290625][ T3212] cdc_ncm 3-1:1.1: bind() failure [ 904.298839][ T3212] usb 3-1: USB disconnect, device number 88 [ 904.511503][ T3212] usb 1-1: USB disconnect, device number 5 [ 905.280220][T12870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 905.520211][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 905.640273][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 905.651358][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.663150][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.673715][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 905.687332][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 905.694251][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 905.703634][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.712436][T12870] usb 1-1: config 0 descriptor?? 05:02:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0xa3, "aad4dc64a9d41a634995d5cec4844f37917af78e7114505d293cf7a4b6afa5e9d5f3284440934f55877f67aeb196ee7fee2f9c53fb033078fe4b40cbf07f78109517001d4e1893d3852ea34470fcbec4076a548718ef0fae801f9526db3df82fbac26a5de7f61831d77e7ad7b7ce3278620079e78f292b4066cb13f41a67b79ac79ddc3746b54ca2a735ab99499a04dad282cdb3a2bbdf9451fc7fc33fe60840199326"}, &(0x7f0000000040)=0xc7) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xa8, r6, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x91, 0xe, "0820ec1b94dc5b4f3ee83ea2a29ef7af10083f5465cd9670f1e4d1a33e5a767de1743df57266801bfa526c9df97d9a58a3c61643c1b8b717fcb31dca27ba432a7719bf88ca0d079af0005aea3c551b75739a5f59e8437bc432b9f89f6dbd87541e90dce34ec5a862e509ac30a9ea8f5cc9dec66ee5c1d0ea07e1b8553be5a04837879a7027ed68b52a406cff82"}]}, 0xa8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000429bd7000fedbdf251a00000054002280080003000101000008000200ff0f000008000500ff7f0000080002003d00000008000500994d00000800040000100000080003000300000008000200000000000800030001000000080006000100000014002280080004001f00000008000700cb0e00009734cbc971defb09be9755553bc93893d9fb064fa1cbb8ea2f49cf810cf0ae0a8a36ca69926a72fa9dcd4055344f183c9f1956b19650562128864e8733917cf088d2dcd62f9f856471b379de35c8efe66510f5216953dd77295695277bfbbd60689856c5ea"], 0x7c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x1c01, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x25000000) 05:02:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd000000) 05:02:57 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x2201, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x2301, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x2401, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4001, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4002, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4003, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c02200065aaaad790ab4cd8ba14000000000000000000", @ANYRES16=r3, @ANYBLOB="10002bbd700005002f000001000008003b0001000000050038000000005108003a3e0000000005003800000000000800225f3a0003000000d00ef556d4e729411afd16af2933b5a27e0b0be8"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010e26bd7000fddbdf250f00000008003900ffff000008003b004000003b000300000008002b00030000000800310008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000314ec02ce616327f1e13b263c8052044fb2588f624f2371e73a3e52cfd0bbe22a183fb9899fd7611c848e75f6ac7bcfa229668122a6a3e8b2a5b650b2652594c7fb49f05f9bbec2847ea6fd64b34bbb959b0b7c1c3df", @ANYRES16=r3, @ANYBLOB="00022abd7000fddbdf2511000000060028000000000008003a000004000008003900010000000500370000000000"], 0x34}}, 0x40080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000825bd7000ffdbdf250b00000005002a000000000005003800010000000500350008000000050035002c0000000a000900aaaab3aaaa0f0000050033000100000005002f0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000082a2b2bd078142b5b852ff72199e5f93d16df86940dc7b96301b62c9d775121a5a24195f5a298068f40173a4d4651699559a4359e7cdf1e16dedb34c436cf9e2ef6d4483729950e68ffed57c04013352878a37d5e25aaa376ce1ed70695d46b5dc579a63c8cc14867c618cac3604678eb087476e325916a5541a906e5fd0e8212037f1ae49e72c1ce4488c58c77e314259b87bfb0eb12188da647f46301e25b7f481bbce", @ANYRES16=r3, @ANYBLOB="20002dbd7000fddbdf250a000000050029000000000005002f000100000005002a000100000008003b00ffffffff0500330000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) restart_syscall() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$FUSE_OPEN(r6, &(0x7f0000000040)={0x20, 0x0, 0x7, {0x0, 0x4}}, 0x20) [ 905.910212][T12870] usbhid 1-1:0.0: can't add hid device: -71 [ 905.916271][T12870] usbhid: probe of 1-1:0.0 failed with error -71 [ 905.934096][T12870] usb 1-1: USB disconnect, device number 6 [ 906.100146][ T3212] usb 3-1: new high-speed USB device number 89 using dummy_hcd 05:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x8002, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xa8, r6, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x91, 0xe, "0820ec1b94dc5b4f3ee83ea2a29ef7af10083f5465cd9670f1e4d1a33e5a767de1743df57266801bfa526c9df97d9a58a3c61643c1b8b717fcb31dca27ba432a7719bf88ca0d079af0005aea3c551b75739a5f59e8437bc432b9f89f6dbd87541e90dce34ec5a862e509ac30a9ea8f5cc9dec66ee5c1d0ea07e1b8553be5a04837879a7027ed68b52a406cff82"}]}, 0xa8}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_STA_WME_MAX_SP={0x24, 0x2, "ce004f9b8036b0904f4e0621796443fc86ed4b9158a9f715497e45f882de648e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x40) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) [ 906.360123][T12870] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 906.470198][ T3212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.620116][T12870] usb 1-1: Using ep0 maxpacket: 16 05:02:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x8003, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 906.640297][ T3212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.649530][ T3212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.657600][ T3212] usb 3-1: Product: syz [ 906.661874][ T3212] usb 3-1: Manufacturer: syz [ 906.666522][ T3212] usb 3-1: SerialNumber: syz 05:02:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe000000) [ 906.740176][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 906.753821][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.767591][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.777892][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 906.791337][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.797930][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 906.807668][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.816514][T12870] usb 1-1: config 0 descriptor?? [ 907.300700][T12870] elecom 0003:056E:00FF.008B: item fetching failed at offset 0/1 [ 907.308510][T12870] elecom: probe of 0003:056E:00FF.008B failed with error -22 [ 907.370113][ T3212] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 907.376138][ T3212] cdc_ncm 3-1:1.0: bind() failure [ 907.420414][ T3212] cdc_ncm 3-1:1.1: bind() failure [ 907.428702][ T3212] usb 3-1: USB disconnect, device number 89 [ 907.502132][T12870] usb 1-1: USB disconnect, device number 7 05:02:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:02:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x40000000) 05:02:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f0000000340)=""/215, 0xd7}], 0x3}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x2}, 0xfffffde3) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x19, 0x0, 0x0) close(r5) fcntl$dupfd(r4, 0x0, r5) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:02:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x8005, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x10000000) 05:02:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0xc001, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:02:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0xc002, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 908.270116][ T3212] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 908.330082][T12870] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 908.529972][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 908.670331][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 908.681448][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.693128][ T3212] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.703335][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 908.716879][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 908.720005][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.724072][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 908.743703][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.752542][ T3212] usb 1-1: config 0 descriptor?? 05:03:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x28bd, 0x75, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x6, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0xc003, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7fffefff) 05:03:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, r5, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10002}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r5, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) lseek(r1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x29800, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 908.910031][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.919406][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.927434][T12870] usb 3-1: Product: syz [ 908.931612][T12870] usb 3-1: Manufacturer: syz [ 908.936196][T12870] usb 3-1: SerialNumber: syz [ 909.029986][ T3212] usbhid 1-1:0.0: can't add hid device: -71 [ 909.035962][ T3212] usbhid: probe of 1-1:0.0 failed with error -71 [ 909.043762][ T3212] usb 1-1: USB disconnect, device number 8 [ 909.409909][ T3212] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 909.679906][ T3212] usb 1-1: device descriptor read/64, error 18 [ 910.069870][ T3212] usb 1-1: device descriptor read/64, error 18 [ 910.339858][ T3212] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 910.609813][ T3212] usb 1-1: device descriptor read/64, error 18 [ 911.000140][ T3212] usb 1-1: device descriptor read/64, error 18 [ 911.119846][ T3212] usb usb1-port1: attempt power cycle 05:03:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x3ffdcf, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x11000000) 05:03:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x280e42, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r1, r3, 0x0, r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$P9_RLINK(r4, &(0x7f0000000300)={0x7, 0x47, 0x2}, 0x7) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="94980b04ea74474675ad1cd5936685634a541ef784ae23a37df10aaffd1f5535243beaed805aea3e1105", 0x2a}, {&(0x7f00000000c0)="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", 0xfb}, {&(0x7f0000000200)="c1e21c93a0", 0x5}], 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:03:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7ffff000) 05:03:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x2, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 911.179816][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 911.185993][T12870] cdc_ncm 3-1:1.0: bind() failure 05:03:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 911.242156][T12870] cdc_ncm 3-1:1.1: bind() failure [ 911.252139][T12870] usb 3-1: USB disconnect, device number 90 [ 911.619740][T12870] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 911.839722][ T3212] usb 1-1: new high-speed USB device number 11 using dummy_hcd 05:03:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff00400000000001090224000100000000090400898003010000092100000001220100090d81030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x2f, 0x6, 0x0, {0x6, 0x3, 0x6, 0x0, 'stack\x00'}}, 0x2f) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:03:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x104, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 911.929769][ T3212] usb 1-1: Invalid ep0 maxpacket: 17 05:03:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x580, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x801, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 911.989812][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.159791][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.169049][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.177352][T12870] usb 3-1: Product: syz [ 912.182666][T12870] usb 3-1: Manufacturer: syz [ 912.187348][T12870] usb 3-1: SerialNumber: syz [ 912.299880][ T3212] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 912.399732][ T3212] usb 1-1: Using ep0 maxpacket: 16 [ 912.519742][ T3212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 912.530766][ T3212] usb 1-1: config 0 interface 0 altsetting 137 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 912.544563][ T3212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.551501][ T3212] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 912.560794][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.569283][ T3212] usb 1-1: config 0 descriptor?? [ 912.610140][ T3212] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 05:03:05 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xcf000000) 05:03:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x1101, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x12000000) 05:03:05 executing program 4: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r5 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockname$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:03:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x1c01, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x2201, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 914.409579][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 914.419354][T12870] cdc_ncm 3-1:1.0: bind() failure [ 914.459819][T12870] cdc_ncm 3-1:1.1: bind() failure [ 914.468273][T12870] usb 3-1: USB disconnect, device number 91 [ 914.819490][T12870] usb 3-1: new high-speed USB device number 92 using dummy_hcd 05:03:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x2301, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x80000000, 0x9, 0xfce3, 0x1, 0x5, 0x400, 0xfb}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:03:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x2401, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x4001, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 914.956149][ T3229] usb 1-1: USB disconnect, device number 12 [ 915.179531][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.359552][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.371036][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.379469][ T3229] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 915.387063][T12870] usb 3-1: Product: syz [ 915.391309][T12870] usb 3-1: Manufacturer: syz [ 915.396811][T12870] usb 3-1: SerialNumber: syz [ 915.619431][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 915.739484][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 915.750516][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.761538][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.771476][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 915.784580][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 915.791194][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 915.800230][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.808752][ T3229] usb 1-1: config 0 descriptor?? [ 916.290006][ T3229] elecom 0003:056E:00FF.008C: item fetching failed at offset 0/1 [ 916.297827][ T3229] elecom: probe of 0003:056E:00FF.008C failed with error -22 [ 916.491595][ T3212] usb 1-1: USB disconnect, device number 13 [ 917.259316][ T3229] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 917.499297][ T3229] usb 1-1: Using ep0 maxpacket: 16 05:03:09 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x4002, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xffefff7f) 05:03:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f0000001800)=""/65, 0x41}], 0x1, &(0x7f0000000340)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000280)=""/20, 0x14}, {&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000001340)=""/183, 0xb7}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000001900)=""/230, 0xe6}, {&(0x7f0000001500)=""/214, 0xd6}, {&(0x7f0000001600)=""/196, 0xc4}], 0x7, &(0x7f0000001780)=""/75, 0x4b}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = eventfd2(0xfffffb6d, 0x80001) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:03:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x25000000) 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x4003, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 917.619354][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 917.630350][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.642154][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.656095][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 917.662285][T12870] cdc_ncm 3-1:1.0: bind() failure 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x8002, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 917.673338][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 917.690092][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 917.696726][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 917.706030][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.715010][ T3229] usb 1-1: config 0 descriptor?? [ 917.729650][T12870] cdc_ncm 3-1:1.1: bind() failure [ 917.735705][T12870] usb 3-1: USB disconnect, device number 92 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x8003, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="fb728e76d3adbd693dd2e7a42dff01000000b55ae1ee4833abcccee9584cd51c30"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x8005, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0xc001, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0xc002, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 918.061852][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 918.067803][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 918.076209][ T3229] usb 1-1: USB disconnect, device number 14 [ 918.099350][T12870] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 918.429542][ T3229] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 918.459481][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.629281][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 918.638372][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.646606][T12870] usb 3-1: Product: syz [ 918.651019][T12870] usb 3-1: Manufacturer: syz [ 918.655588][T12870] usb 3-1: SerialNumber: syz [ 918.669236][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 918.789260][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 918.800254][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.811910][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.822167][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 918.835816][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.844012][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 918.853345][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.862175][ T3229] usb 1-1: config 0 descriptor?? [ 919.589176][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 919.595164][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 919.603094][ T3229] usb 1-1: USB disconnect, device number 15 [ 920.299084][ T3229] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 920.539079][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 920.659123][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 920.670153][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.681793][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.692107][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 920.705564][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 920.712524][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 920.721920][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.730902][ T3229] usb 1-1: config 0 descriptor?? 05:03:12 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0xc003, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/25, &(0x7f00000000c0)=0x19) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="94a10d99346fa4b9b884a66bfdcc33b25d722fbba42270b54cafc1f338e748253c701c1e94666556965e1d87f4a7f506ddfe2bb3a5a903d1b0660d9ab292149e945263530fa04cfdb24360542b3f2ee8cfc5b85f710c964746c3779e628a139fb2e0", 0x62}], 0x1, 0x7) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xffffff7f) 05:03:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x40000000) 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x29800, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x3ffdcf, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 920.889091][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 920.895266][T12870] cdc_ncm 3-1:1.0: bind() failure 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x580, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VT_WAITACTIVE(r2, 0x5607) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 920.939424][T12870] cdc_ncm 3-1:1.1: bind() failure [ 920.945401][T12870] usb 3-1: USB disconnect, device number 93 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8005, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 921.069434][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 921.076242][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 921.084703][ T3229] usb 1-1: USB disconnect, device number 16 [ 921.319026][T12870] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 921.449007][ T3229] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 921.679058][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.690267][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 921.819066][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 921.830418][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.841496][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.851525][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 921.864670][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 921.871375][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 921.880418][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 921.889880][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.897852][T12870] usb 3-1: Product: syz [ 921.902041][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.910060][T12870] usb 3-1: Manufacturer: syz [ 921.914728][T12870] usb 3-1: SerialNumber: syz [ 921.920134][ T3229] usb 1-1: config 0 descriptor?? [ 922.399608][ T3229] elecom 0003:056E:00FF.008D: item fetching failed at offset 0/1 [ 922.407443][ T3229] elecom: probe of 0003:056E:00FF.008D failed with error -22 [ 922.600227][ T3229] usb 1-1: USB disconnect, device number 17 [ 923.368897][T13116] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 923.608836][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 923.748907][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 923.759901][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.772175][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.782098][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 923.795222][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 923.801922][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 923.811053][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.819625][T13116] usb 1-1: config 0 descriptor?? [ 924.088894][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 924.095024][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 924.102986][T13116] usb 1-1: USB disconnect, device number 18 05:03:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x2, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x1, 0x10000000, 0x8, 0xb5, 0x5, 0x400, 0x80, 0x1, 0xd5}, 0x0) 05:03:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7ffffffff000) 05:03:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) 05:03:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x3, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x4, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x5, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x6, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x7, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 924.158852][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 924.167209][T12870] cdc_ncm 3-1:1.0: bind() failure 05:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x8, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 924.219480][T12870] cdc_ncm 3-1:1.1: bind() failure [ 924.225827][T12870] usb 3-1: USB disconnect, device number 94 [ 924.558850][T13116] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 924.608813][T12870] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 924.798763][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 924.918841][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 924.929882][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.941504][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.952539][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 924.966872][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 924.974396][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 924.978824][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.984302][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.008034][T13116] usb 1-1: config 0 descriptor?? [ 925.158823][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.168026][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.176168][T12870] usb 3-1: Product: syz [ 925.182538][T12870] usb 3-1: Manufacturer: syz [ 925.187288][T12870] usb 3-1: SerialNumber: syz [ 925.249469][T22822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 925.538735][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 925.544692][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 925.552082][T13116] usb 1-1: USB disconnect, device number 19 [ 926.228653][T22399] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 926.468648][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 926.588676][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 926.599690][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.611406][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.621689][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 926.635172][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 926.642241][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 926.651585][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.660411][T22399] usb 1-1: config 0 descriptor?? [ 926.898887][T22822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 927.198637][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 927.204709][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 927.212629][T22399] usb 1-1: USB disconnect, device number 20 05:03:18 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x9, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 05:03:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x10000000000000) 05:03:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7ffff000) 05:03:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000009259017f27bb02c46459de106e05ff004000000001000000000904008980030100000921000000012201000905810300f4ff0000"], 0x0) r1 = syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xbf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1f, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0xcb, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x89, 0x2}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x1, 0x1, 0x8, 0x40}, 0x44, &(0x7f00000000c0)={0x5, 0xf, 0x44, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3f, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xbe1, 0x8, 0x6a9, [0x0, 0xff0000, 0xff00, 0xff003f, 0xc00f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa6, 0xa2, 0x3, 0xc3, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x8, 0x81}, @ptm_cap={0x3}]}, 0x2, [{0x48, &(0x7f0000000140)=@string={0x48, 0x3, "17740fa3b6eb6533628be66808009a1f06d5fc926c4f89ec1f2abe19d71c9608f303562764c005f5396223fef997f986c295711772ca7851a2e278f18f2a293703c13e1cd30b"}}, {0x21, &(0x7f00000001c0)=@string={0x21, 0x3, "af34b23e49c5b6c71ad0c5765659ed2ff8ad8f50f7b75998b92a234b580c7a"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xa, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xb, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xc, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xd, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xe, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 927.418603][T12870] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 927.425926][T12870] cdc_ncm 3-1:1.0: bind() failure 05:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xf, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 927.478896][T12870] cdc_ncm 3-1:1.1: bind() failure [ 927.485356][T12870] usb 3-1: USB disconnect, device number 95 [ 927.768545][T13116] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 927.838592][T12870] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 928.048528][T13116] usb 1-1: device descriptor read/64, error 18 [ 928.198565][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.368601][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.377645][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.385925][T12870] usb 3-1: Product: syz [ 928.390255][T12870] usb 3-1: Manufacturer: syz [ 928.394958][T12870] usb 3-1: SerialNumber: syz [ 928.448529][T13116] usb 1-1: device descriptor read/64, error 18 [ 928.718481][T13116] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 928.988444][T13116] usb 1-1: device descriptor read/64, error 18 [ 929.378420][T13116] usb 1-1: device descriptor read/64, error 18 [ 929.498472][T13116] usb usb1-port1: attempt power cycle [ 929.558483][T12870] cdc_ncm 3-1:1.0: bind() failure [ 929.578509][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 929.598475][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 929.606008][T12870] usb 3-1: USB disconnect, device number 96 05:03:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x10, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "ec87ab6e2c254de0", "73471cf0ba63b238f944c58a14a17e2d654335b4219915163e19b79ea94611d3", "f45a60e6", "a1cf4e81e7ef034d"}, 0x38) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) capget(&(0x7f00000000c0)={0x19980330, r4}, &(0x7f0000000100)={0x3ff, 0x0, 0x4, 0x9, 0x1eee0000}) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x5663a5455a76cdd7) r5 = socket$pptp(0x18, 0x1, 0x2) write(r5, &(0x7f0000000340), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xf0ff7f00000000) 05:03:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffefff7f) [ 930.208398][T13116] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 930.245035][T22911] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 930.311746][T13116] usb 1-1: Invalid ep0 maxpacket: 146 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x11, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x201080, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002000000f0ee022bedebe8702d76c86b8998c3f914"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x12, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x13, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x14, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x15, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x16, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 930.458391][T13116] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 930.498358][ T5] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 930.858367][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.948356][T13116] usb 1-1: device not accepting address 24, error -71 [ 930.955313][T13116] usb usb1-port1: unable to enumerate USB device [ 931.028583][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.038094][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.046860][ T5] usb 3-1: Product: syz [ 931.052512][ T5] usb 3-1: Manufacturer: syz [ 931.057107][ T5] usb 3-1: SerialNumber: syz [ 931.308283][T13116] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 931.548465][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 931.668320][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 931.679338][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.690997][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.701358][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 931.714814][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 931.721803][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 931.731107][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.739892][T13116] usb 1-1: config 0 descriptor?? [ 932.218850][T13116] elecom 0003:056E:00FF.008E: item fetching failed at offset 0/1 [ 932.226668][T13116] elecom: probe of 0003:056E:00FF.008E failed with error -22 [ 932.248287][ T5] cdc_ncm 3-1:1.0: bind() failure [ 932.268277][ T5] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 932.288260][ T5] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 932.295750][ T5] usb 3-1: USB disconnect, device number 97 [ 932.419367][T13116] usb 1-1: USB disconnect, device number 25 05:03:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x17, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xf0ffffff7f0000) 05:03:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000000c0)="fc79dcb0be6813114d9af6e95814a0a4b6afa4a8e08472b2faa0117f0a757c73c9423d943dbc73539bb94ace6c183c2d6c52a8c6f691284cf46592b1bfc4949847290cdb3718709a266dcde1bb5f82626694893bece20c9b6789f2c676bbb3bcde9bc698df12d6edbd66c35b9c3b8b0d0d32f3fc4c44d37c36e13cbb9e580d3e96609de95994cace9cef828f4e6073db14c45cf4c6402ea3784fe43dc740cb4a615fff59eac1530a94a17b88a29e8f8db9ba49", 0xb3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffff7f) 05:03:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1d, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 933.168167][T13116] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 933.188157][ T3229] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 933.428127][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 933.538172][T13116] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.548198][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 933.560180][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.571248][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.581207][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 933.594562][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 933.601323][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 933.610408][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.619009][ T3229] usb 1-1: config 0 descriptor?? 05:03:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x30, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socket$inet6(0xa, 0x0, 0x7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1}}], 0x1, 0x10000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd91}, 0x0) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000340)={0x200, "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"}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 933.708295][T13116] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 933.717438][T13116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.735498][T13116] usb 3-1: Product: syz 05:03:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x100000000000000) 05:03:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x11c, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x11e, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 933.754583][T13116] usb 3-1: Manufacturer: syz [ 933.767278][T13116] usb 3-1: SerialNumber: syz [ 933.818168][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 933.824341][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 933.832616][ T3229] usb 1-1: USB disconnect, device number 26 [ 934.188091][ T3229] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 934.428050][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 934.548074][ T3229] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 934.558414][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 934.569470][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 934.582785][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.589464][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 934.598570][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.607060][ T3229] usb 1-1: config 0 descriptor?? [ 934.688090][T13116] cdc_ncm 3-1:1.0: bind() failure [ 934.748356][T13116] cdc_ncm 3-1:1.1: bind() failure [ 934.754163][T13116] usb 3-1: USB disconnect, device number 98 05:03:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7ffffffff000) 05:03:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x180, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x200000000000000) 05:03:26 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x2e0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x300, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x3fc, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 935.657966][T12870] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 936.017988][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.188080][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.197282][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.206947][T12870] usb 3-1: Product: syz [ 936.211836][T12870] usb 3-1: Manufacturer: syz [ 936.216574][T12870] usb 3-1: SerialNumber: syz 05:03:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$P9_ROPEN(r5, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x4, 0x0, 0x2}, 0x2}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000040)) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x500, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x300000000000000) 05:03:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff00400000000001090224000100000000090400898003010000092101000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0xffffffff, 0x5, 0x4, 0x1, 0x6, 0x100}) 05:03:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x10000000000000) 05:03:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x600, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x700, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 936.770010][ T3229] usb 1-1: string descriptor 0 read error: -71 [ 936.776749][ T3229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 936.786589][ T3229] usb 1-1: USB disconnect, device number 27 [ 937.137894][T12870] cdc_ncm 3-1:1.0: bind() failure [ 937.142974][ T3229] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 937.188234][T12870] cdc_ncm 3-1:1.1: bind() failure [ 937.197021][T12870] usb 3-1: USB disconnect, device number 99 [ 937.387831][ T3229] usb 1-1: Using ep0 maxpacket: 16 [ 937.507888][ T3229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 937.518919][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.530609][ T3229] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.540936][ T3229] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 937.554427][ T3229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 937.562764][ T3229] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 937.572987][ T3229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.588644][ T3229] usb 1-1: config 0 descriptor?? 05:03:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x900, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:03:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x400000000000000) 05:03:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xf0ff7f00000000) 05:03:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xa00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xb00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xc00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 938.107837][T12870] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 938.118396][ T3229] usbhid 1-1:0.0: can't add hid device: -71 [ 938.124531][ T3229] usbhid: probe of 1-1:0.0 failed with error -71 [ 938.133758][ T3229] usb 1-1: USB disconnect, device number 28 [ 938.467822][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.647917][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 938.657034][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.665104][T12870] usb 3-1: Product: syz [ 938.669352][T12870] usb 3-1: Manufacturer: syz [ 938.673986][T12870] usb 3-1: SerialNumber: syz [ 938.817743][T13116] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 939.057708][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 939.177774][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 939.188781][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.199826][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.209746][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 939.222873][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 939.229610][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 939.238642][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.247172][T13116] usb 1-1: config 0 descriptor?? 05:03:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xd00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x500000000000000) 05:03:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) close(r0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) [ 939.577711][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 939.583692][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 939.591700][T13116] usb 1-1: USB disconnect, device number 29 [ 939.597702][T12870] cdc_ncm 3-1:1.0: bind() failure [ 939.640298][T12870] cdc_ncm 3-1:1.1: bind() failure [ 939.651893][T12870] usb 3-1: USB disconnect, device number 100 [ 939.977652][T13116] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 940.227662][T13116] usb 1-1: Using ep0 maxpacket: 16 05:03:31 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 05:03:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xf0ffffff7f0000) 05:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xe00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/182) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x100, 0x3, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xf00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1100, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1200, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x600000000000000) [ 940.357648][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 940.368826][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.380389][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.391262][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 940.404652][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 940.411587][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 940.420832][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.460504][T13116] usb 1-1: config 0 descriptor?? [ 940.617600][ T5] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 940.718595][T23119] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 940.977680][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.027628][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 941.033665][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 941.041168][T13116] usb 1-1: USB disconnect, device number 30 [ 941.147686][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 941.157387][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.166106][ T5] usb 3-1: Product: syz [ 941.170553][ T5] usb 3-1: Manufacturer: syz [ 941.175235][ T5] usb 3-1: SerialNumber: syz [ 941.707505][T13116] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 941.947488][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 942.067605][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 942.078809][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.090396][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.100729][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 942.114158][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 942.121102][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 942.130422][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.139232][T13116] usb 1-1: config 0 descriptor?? [ 942.377875][T23119] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:03:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff00400000001ddcccaa24000100000000090400898003010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0xffffffb1]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @empty}, {0x6, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'veth1_to_hsr\x00'}) 05:03:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1300, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x700000000000000) 05:03:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0xed, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)=""/237}, &(0x7f0000000280)=0x78) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x0, 0x0) [ 942.557621][ T5] cdc_ncm 3-1:1.0: bind() failure [ 942.577507][ T5] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 942.584117][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 942.590205][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 942.597242][T13116] usb 1-1: USB disconnect, device number 31 [ 942.607499][ T5] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 942.644781][ T5] usb 3-1: USB disconnect, device number 101 [ 942.947411][T13116] usb 1-1: new high-speed USB device number 32 using dummy_hcd 05:03:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 05:03:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x100000000000000) 05:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1400, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1500, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1600, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1700, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1c01, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1d00, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 943.187421][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 943.227475][T13116] usb 1-1: too many configurations: 220, using maximum allowed: 8 [ 943.287445][ T5] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 943.347465][T13116] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 943.355332][T13116] usb 1-1: can't read configurations, error -61 [ 943.507401][T13116] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 943.647487][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.747351][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 943.787413][T13116] usb 1-1: too many configurations: 220, using maximum allowed: 8 [ 943.817430][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.826487][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.835087][ T5] usb 3-1: Product: syz [ 943.839562][ T5] usb 3-1: Manufacturer: syz [ 943.844133][ T5] usb 3-1: SerialNumber: syz [ 943.907417][T13116] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 943.914988][T13116] usb 1-1: can't read configurations, error -61 [ 943.921889][T13116] usb usb1-port1: attempt power cycle [ 944.637291][T13116] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 944.727342][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 944.767372][T13116] usb 1-1: too many configurations: 220, using maximum allowed: 8 [ 944.887323][T13116] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 944.894901][T13116] usb 1-1: can't read configurations, error -61 [ 945.047288][T13116] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 945.137358][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 945.177330][T13116] usb 1-1: too many configurations: 220, using maximum allowed: 8 [ 945.207312][ T5] cdc_ncm 3-1:1.0: bind() failure [ 945.227299][ T5] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 945.247318][ T5] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 945.254775][ T5] usb 3-1: USB disconnect, device number 102 [ 945.297360][T13116] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 945.304920][T13116] usb 1-1: can't read configurations, error -61 [ 945.311539][T13116] usb usb1-port1: unable to enumerate USB device 05:03:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0xef, {0x9, 0x21, 0x3ff, 0x8, 0x1, {0x22, 0xcfe}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x6, 0x7}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x0, 0x4d, 0x8, 0x81}, 0xb2, &(0x7f0000000100)={0x5, 0xf, 0xb2, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0xfd, 0x7, 0x8001, 0x1}, @generic={0x73, 0x10, 0xa, "3f07062d7746fa5f1a44aea8df3604030c44da44254536e5a8f80a53cfc95e88c83602e192350fe731433364dc39d801b8b7ac91ee9c2cb0ad764f69b94dca25c6dc4effa1aa6a01e16fbea9a2b0e5d1a28fad5d62c88ae0a7084431cc8542da2260386cb5714dca2f9d91f23c53c16e"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x6, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x4, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b38c20a8f36c451c41d016a01f579a5e"}, @ss_cap={0xa, 0x10, 0x3, 0x8ed514d7b4a3d3dc, 0xd, 0xb, 0x6, 0x5}]}}) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x20, 0x4, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x200000000000000) 05:03:36 executing program 4: prlimit64(0x0, 0xf, &(0x7f00000001c0)={0x6, 0xffffffffffff85b9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x800000000000000) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1e01, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x2000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x3000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x4000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xe002, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xfc03, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x101000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 945.977201][ T5] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 946.007294][T13116] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 946.227191][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 946.350586][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 946.361682][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.373329][T13116] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.384237][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.394966][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 946.408562][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 946.415143][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 946.426896][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.435676][ T5] usb 1-1: config 0 descriptor?? [ 946.547220][T13116] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 946.556267][T13116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.564769][T13116] usb 3-1: Product: syz [ 946.569230][T13116] usb 3-1: Manufacturer: syz [ 946.573803][T13116] usb 3-1: SerialNumber: syz [ 946.897603][T23218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 946.977157][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 946.983271][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 946.991213][ T5] usb 1-1: USB disconnect, device number 36 [ 947.667080][ T5] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 947.907159][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 947.947141][T13116] cdc_ncm 3-1:1.0: bind() failure [ 947.967133][T13116] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 947.987160][T13116] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 947.994636][T13116] usb 3-1: USB disconnect, device number 103 [ 948.027190][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 948.038332][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.049439][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.059360][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 948.072482][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 948.079104][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 948.088127][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.096661][ T5] usb 1-1: config 0 descriptor?? 05:03:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x7) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40080, 0x20) r1 = socket(0x11, 0x800000003, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f00000006c0)=0x6e) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000ec0)=ANY=[@ANYBLOB="ff010000000502003f0000e5671d2c6be229f1e5e2e5bf0707112dcf917b2313e488f92b577978d3fbf59eae2b247c3ba36b6fd182fafb966cd0cc4fc72a09599dadc261b82f0157f5b18b2b28d9480e39a10626c28906cc76ed9d91d1e96d9d702e92cdb714f85effbbadc2502893b7359d11d3bd66074f0e3d29a4c500cb5429e5f09b00009160090a748d80d7c89749eea331d6b8c178f13adfdf90a6ddb43021c74658e91da032550a28ec6a536bc61f7004cc763bbcce744c2f9730ea4183adf26edc8802ea2f5eeafb0b10e4a1484633dd8d5777e232e5e098b03e58e382431099ae8f00"], 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000340)=""/206, 0xce}], 0x4, &(0x7f0000000480)=""/30, 0x1e}, 0x2}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/73, 0x49}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000e40)=""/67, 0x43}, {&(0x7f0000000880)=""/58, 0x3a}], 0x6, &(0x7f0000000940)=""/112, 0x70}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/138, 0x8a}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/24, 0x18}, {&(0x7f0000000bc0)=""/178, 0xb2}], 0x4, &(0x7f0000000800)=""/43, 0x2b}}], 0x3, 0x40002041, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x200000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x900000000000000) 05:03:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x300000000000000) 05:03:39 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x99, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/165) syz_usb_control_io(r0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) keyctl$set_timeout(0xf, r4, 0x8001) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="a000080000000200"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 948.337572][T23262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x202000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:39 executing program 2: prlimit64(0x0, 0xf, &(0x7f00000001c0)={0x6, 0xffffffffffff85b9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x300000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x400000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x402001, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x80ffff, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 948.427069][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 948.433062][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 948.445022][ T5] usb 1-1: USB disconnect, device number 37 05:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1204000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 948.797080][ T5] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 949.066964][ T5] usb 1-1: Invalid ep0 maxpacket: 16 [ 949.086986][T12870] usb 3-1: new high-speed USB device number 104 using dummy_hcd 05:03:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xa00000000000000) [ 949.226996][ T5] usb 1-1: new low-speed USB device number 39 using dummy_hcd 05:03:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 949.447002][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.466965][ T5] usb 1-1: Invalid ep0 maxpacket: 16 [ 949.472894][ T5] usb usb1-port1: attempt power cycle [ 949.627063][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 949.636382][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.644543][T12870] usb 3-1: Product: syz [ 949.648751][T12870] usb 3-1: Manufacturer: syz [ 949.653331][T12870] usb 3-1: SerialNumber: syz [ 950.186924][ T5] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 950.276998][ T5] usb 1-1: Invalid ep0 maxpacket: 16 [ 950.426918][ T5] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 950.516914][ T5] usb 1-1: Invalid ep0 maxpacket: 16 [ 950.522338][ T5] usb usb1-port1: unable to enumerate USB device [ 951.036855][T12870] cdc_ncm 3-1:1.0: bind() failure [ 951.056870][T12870] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 951.076888][T12870] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 951.084340][T12870] usb 3-1: USB disconnect, device number 104 05:03:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x2000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x400000000000000) 05:03:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x2, 0x10, 0x100, 0x4, 0x8, 0x9, 0x6731502b, 0x1ff, 0x101}, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0xe000100) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=""/243, &(0x7f0000000040)=0xf3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = dup(0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000240)=0x20, 0x4) 05:03:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xb00000000000000) 05:03:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000027f6aec07afb00000000200e88210886c3470805df0075d419263715003f9e6564aa0eaed5d4817149d17daebe26693f0fe3db61b9b60b139c7eea6666838f7676a90ec114f8d6d4674be83adcb614dd1db01920000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) pidfd_open(r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x4, 0x4}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x70dda4c}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x19, 0x0, 0x0) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) close(r6) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xffffffffffffff20) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x36) 05:03:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x3000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x4000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x5000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x6000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x7000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x8000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x9000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 951.836759][ T5] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 951.856755][T12870] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 952.076753][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 952.116778][T12870] usb 3-1: Using ep0 maxpacket: 16 [ 952.206806][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 952.219546][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.230822][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.236836][T12870] usb 3-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 952.240817][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 952.252672][T12870] usb 3-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.264991][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 952.277427][T12870] usb 3-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.282888][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 05:03:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x500000000000000) 05:03:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xa000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) [ 952.293448][T12870] usb 3-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 952.302041][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.315525][T12870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 952.328652][ T5] usb 1-1: config 0 descriptor?? [ 952.334634][T12870] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 952.346217][T12870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.359990][T12870] usb 3-1: config 0 descriptor?? [ 952.608193][T23366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 952.906745][T12870] usbhid 3-1:0.0: can't add hid device: -71 [ 952.912729][T12870] usbhid: probe of 3-1:0.0 failed with error -71 [ 952.920919][T12870] usb 3-1: USB disconnect, device number 105 [ 953.216725][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 953.222749][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 953.230607][ T5] usb 1-1: USB disconnect, device number 42 [ 953.966640][ T5] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 954.206610][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 954.326675][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 954.337637][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.348665][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.358570][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 954.371760][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 954.378372][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 954.387387][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.395886][ T5] usb 1-1: config 0 descriptor?? 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xb000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xc00000000000000) 05:03:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cff40001be35d0722861680e838c6bdd7471a1df02ce03f3d78493279fda5364edf1390002626b86f3b2069a364f80080da98231d2f9f512ff14ce6ae72916511a3e881e29c69a67eb66de9757b90a7a4e1b8afbdcfcaebe7e942d2773f1a5158dc35882e5d09676b88145ca774b825c4ea6f16fdd5cb1f086935a3bfcee830a24e79a1f414f520b26541b411af4c6703b9687d0acef9cdae033e3bc5cd1c9087d169b48259c3ea5ada243165ace38967d7c43f9234a7784eeb3209776de4f56834b37d63f64522eb984c6559b10159e70d0874a0007312351306eb2ac8f496070d2feabcebed5a7bafae52c77bdafa32e896d50d74c26a2c3c3f", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000075647000"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4020841}, 0x8000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000020002000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x600000000000000) 05:03:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x400000000000000) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xc000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xd000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xe000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xf000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x10000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x11000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x12000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 954.596637][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 954.602944][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 954.615225][ T5] usb 1-1: USB disconnect, device number 43 [ 954.976666][ T5] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 955.216539][ T5] usb 1-1: Using ep0 maxpacket: 16 05:03:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xd00000000000000) 05:03:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x13000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 955.346559][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 955.358245][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.369848][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.380292][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 955.393792][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 955.400693][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 955.410233][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.419020][ T5] usb 1-1: config 0 descriptor?? [ 956.146698][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 956.152941][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 956.165379][ T5] usb 1-1: USB disconnect, device number 44 [ 956.856448][ T5] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 957.096389][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 957.226427][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 957.237408][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.248438][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.258371][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 957.271476][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 957.278096][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 957.287116][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.295634][ T5] usb 1-1: config 0 descriptor?? 05:03:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000a0000000200"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="b13de256029670580b1cb05b03dceceb5635f68a0b648867a9e739eeef82a9d454ac452d49a5ecbd48f35b8f04c9cf8596d058a875e7dccccf91ae78599258e4bd61727dad726e4e475977b104f2914c8c219cab6a7e8fbd7dfed9089fdec7b3e00560fb9ec22e2b663f9167aff3bc678ea0c842b764b6e10f902a763d3f2c1c00f1235fd941b49f34a5d3ebd58b5d705104f38332a633c40353dd66a041994ebd348736f70a0f2b4b767868378d960a7de36e7ddf0b", 0xb6, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r3, r5}, &(0x7f0000000400)=""/142, 0x8e, &(0x7f00000005c0)={&(0x7f0000000280)={'sha384-generic\x00'}, &(0x7f00000004c0)="218df40c364bff3f6ad02661a86a259cb198b5007af2d35b82a5f91b6429879e8b8a448e71650c5e9db762ff642725f5f53d950e125a0c8afc1e0c10ecc8bdb7696e43e2cede5eb88c0616d341bac90dc028bb14f7b9bcb048576aee952e1bd3b3bc18e309738a0c6f6d3fe00b87d45749f84a981926f3c5bd88f903a6f047fe610cdb244013eb8cd8f61127ca3de8852d8d6e8def0c47c93cecc65ea8dfee6fe3102bcd1be98ec9a6c849d8dad35049dbb745b3f747be7d7ba6ea4d6932ba42d9bb91d231a4535ea674d46a", 0xcc}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/22) preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x14000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 05:03:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x700000000000000) 05:03:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xe00000000000000) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x15000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x16000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x17000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1c010000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1d000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x1e010000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 957.616413][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 957.622411][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 957.635363][ T5] usb 1-1: USB disconnect, device number 45 [ 957.796322][T12870] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 957.996325][ T5] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 958.186375][T12870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.236319][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 958.356329][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 958.367339][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.376425][T12870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 958.379687][ T5] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.387600][T12870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.398034][ T5] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 958.405466][T12870] usb 3-1: Product: syz [ 958.419330][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 958.422932][T12870] usb 3-1: Manufacturer: syz [ 958.430698][ T5] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 958.434022][T12870] usb 3-1: SerialNumber: syz [ 958.443449][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.456051][ T5] usb 1-1: config 0 descriptor?? [ 958.936880][ T5] elecom 0003:056E:00FF.008F: item fetching failed at offset 0/1 [ 958.944674][ T5] elecom: probe of 0003:056E:00FF.008F failed with error -22 [ 959.137718][ T3229] usb 1-1: USB disconnect, device number 46 [ 959.356255][T12870] cdc_ncm 3-1:1.0: bind() failure [ 959.406517][T12870] cdc_ncm 3-1:1.1: bind() failure [ 959.415119][T12870] usb 3-1: USB disconnect, device number 106 [ 959.906172][T12870] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 960.146181][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 960.266223][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 960.279807][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.290840][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.300840][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 960.313988][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 960.320622][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 960.329650][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.338207][T12870] usb 1-1: config 0 descriptor?? 05:03:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff004000090224400000000000000000898003011788e07b7a0d33322d6ef1bacdfb8c78a1421d2f00000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x50000}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 05:03:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x40000000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000020002000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x1000000000000000) 05:03:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000000c0)=""/119) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = accept$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @private}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'vlan1\x00', r6}) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 05:03:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x800000000000000) 05:03:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x80010000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xe0020000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xfc030000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0xffff8000, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x2, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 960.616162][T12870] usbhid 1-1:0.0: can't add hid device: -71 [ 960.625408][T12870] usbhid: probe of 1-1:0.0 failed with error -71 [ 960.634829][T12870] usb 1-1: USB disconnect, device number 47 [ 960.826148][ T3229] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 961.006099][T12870] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 961.066095][ T3229] usb 3-1: Using ep0 maxpacket: 16 [ 961.186118][ T3229] usb 3-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 961.197139][ T3229] usb 3-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.210380][ T3229] usb 3-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.220738][ T3229] usb 3-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 961.234233][ T3229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 961.241229][ T3229] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 961.250596][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 961.255746][ T3229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.264828][ T3229] usb 3-1: config 0 descriptor?? [ 961.286242][T12870] usb 1-1: too many configurations: 64, using maximum allowed: 8 [ 961.406151][T12870] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 961.413747][T12870] usb 1-1: can't read configurations, error -61 [ 961.566091][T12870] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 961.806032][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 961.846133][T12870] usb 1-1: too many configurations: 64, using maximum allowed: 8 [ 961.976184][T12870] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 961.983732][T12870] usb 1-1: can't read configurations, error -61 [ 961.990737][T12870] usb usb1-port1: attempt power cycle [ 962.016052][ T3229] usbhid 3-1:0.0: can't add hid device: -71 [ 962.022014][ T3229] usbhid: probe of 3-1:0.0 failed with error -71 [ 962.030054][ T3229] usb 3-1: USB disconnect, device number 107 [ 962.705961][T12870] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 962.796013][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 962.836034][T12870] usb 1-1: too many configurations: 64, using maximum allowed: 8 [ 962.956015][T12870] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 962.963593][T12870] usb 1-1: can't read configurations, error -61 [ 963.115962][T12870] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 963.206011][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 963.246045][T12870] usb 1-1: too many configurations: 64, using maximum allowed: 8 [ 963.365990][T12870] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 963.373536][T12870] usb 1-1: can't read configurations, error -61 [ 963.380450][T12870] usb usb1-port1: unable to enumerate USB device 05:03:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:03:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x3, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x1100000000000000) 05:03:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x801000000000000) 05:03:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 05:03:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', r3}) close(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000240)={'nr0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:03:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x4, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 05:03:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x5, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x6, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:03:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x7, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 964.035911][T12870] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 964.275844][T12870] usb 1-1: Using ep0 maxpacket: 16 [ 964.395907][T12870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 964.408158][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.419793][T12870] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.430072][T12870] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 964.443651][T12870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 964.450600][T12870] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 964.459914][T12870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.468769][T12870] usb 1-1: config 0 descriptor?? [ 964.946471][T12870] elecom 0003:056E:00FF.0090: item fetching failed at offset 0/1 [ 964.954280][T12870] elecom: probe of 0003:056E:00FF.0090 failed with error -22 [ 965.147033][T12870] usb 1-1: USB disconnect, device number 52 [ 965.925733][T13116] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 966.165734][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 966.285802][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 966.296786][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.308372][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.318654][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 966.332123][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 966.339032][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 966.348424][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.357255][T13116] usb 1-1: config 0 descriptor?? 05:03:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x8, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x24}}, 0x0) 05:03:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="53a095bc555a64defcd56107d0f1e9cb8172c56a1bbb006c145d5a0e858b328107325885597aaa299e3a072b77a570b06e474e99543f5f0ace3b52bf105ddf70332a3afe164dfc00000018e098505a9a0b26c37353ed", 0x56}], 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)={0x2, 'batadv0\x00', {0x20}, 0x18}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:03:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x1200000000000000) 05:03:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x900000000000000) 05:03:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = dup(r2) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x9, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xa, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xb, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xc, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 966.655810][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 966.661979][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 966.671192][T13116] usb 1-1: USB disconnect, device number 53 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xd, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xe, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xf, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 967.045651][T13116] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 967.285635][T13116] usb 1-1: Using ep0 maxpacket: 16 05:03:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x1000}, 0x1c) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000500)}, {&(0x7f00000000c0)="87f5ec820175cd38584afe8ed67d5f900b6b91c7dfc2e181f329a6e677b24a03227aab932b3536b4f8792fa477a3ce2407a18475316bc0175d659000", 0x3c}, {&(0x7f0000000200)="dfa8dcf8b11500afce56b6025e3f48c85ad4fcc75926fcce988eadfab14ded7d5863768376b9a87d26bb8c7360dbd7d31f673532f1b6ab55e2ce7f22255e6918b4c4b8175004b0dd809f52d76e3493b08e9297348dedfe36a2412662168ceb0cb85c5d7a00f78651a218a6da9ccb3e1eb4f14277d88379f7d9d8cd503a6c5e7f289c633c981f47", 0x87}, {&(0x7f0000000340)="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", 0xfc}], 0x4, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x3f, 0x3f, 0x2, 0x7}, 0x10) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x81, 0x0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:03:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x2500000000000000) [ 967.412270][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 967.424903][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.437041][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.447464][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 05:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x10, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 967.460938][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.468019][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 967.477431][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.486363][T13116] usb 1-1: config 0 descriptor?? [ 967.727274][T23626] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 968.155657][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 968.161641][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 968.169721][T13116] usb 1-1: USB disconnect, device number 54 [ 968.845525][T22399] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 969.095486][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 969.235588][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 969.249882][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.261964][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.272274][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 969.285483][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 969.292070][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 969.301157][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.309692][T22399] usb 1-1: config 0 descriptor?? [ 969.545933][T23626] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:04:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xa00000000000000) 05:04:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4005) 05:04:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x11, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x4000000000000000) 05:04:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8045}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf250500000014000300fe80000000000000000000000000003e05000100010000000800040064010100140006006272696467655f736c6176650000"], 0x4c}}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf25060000003c00098008000200dcd90000080002000000000008000100070000000800010000100000080001000600000008000200ff01000008000200df00000044000380080003000b3600000800030008000000080001000100000008000100060000000800020008000000080001000010000008000300080000000800020009000000"], 0x94}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) recvmmsg(r0, &(0x7f0000001c40), 0x0, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x1) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x1, 0x59a3, 0x1, 0x0, 0x0, 0x2000000000000, 0x2, 0x800}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x12, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x13, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x14, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x15, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 969.805544][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 969.811490][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 969.820351][T22399] usb 1-1: USB disconnect, device number 55 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x16, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x17, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 970.175736][T22399] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 970.415425][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 970.535451][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 970.546474][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.560235][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.571446][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 05:04:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb00000000000000) [ 970.586286][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 970.592945][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 970.609671][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.618517][T22399] usb 1-1: config 0 descriptor?? [ 971.095986][T22399] elecom 0003:056E:00FF.0091: item fetching failed at offset 0/1 [ 971.103782][T22399] elecom: probe of 0003:056E:00FF.0091 failed with error -22 [ 971.298861][T22399] usb 1-1: USB disconnect, device number 56 [ 972.065315][T13116] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 972.305324][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 972.425341][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 972.436299][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.447417][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.457332][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 972.470455][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 972.477071][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 972.486088][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.494606][T13116] usb 1-1: config 0 descriptor?? 05:04:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x22, 0x0, 0x3, 0x3, 0x4, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1d, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xcf00000000000000) 05:04:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc00000000000000) 05:04:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff00400000000001090224000100000000090400898003010000092100000001220100090581030001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000a40)=""/4096) r4 = dup(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$P9_RXATTRCREATE(r4, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x30, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x11c, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x11e, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x180, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x2e0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 972.845259][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 972.851225][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 972.872144][T13116] usb 1-1: USB disconnect, device number 57 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x300, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 973.255352][T13116] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 973.515178][T13116] usb 1-1: Using ep0 maxpacket: 16 05:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x3fc, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040), 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xffefff7f00000000) [ 973.635276][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 973.646430][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.658227][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 973.672534][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 05:04:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd00000000000000) [ 973.679728][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 973.689202][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.702231][T13116] usb 1-1: config 0 descriptor?? [ 974.190181][T13116] elecom 0003:056E:00FF.0092: item fetching failed at offset 0/1 [ 974.202746][T13116] elecom: probe of 0003:056E:00FF.0092 failed with error -22 [ 974.387327][T22399] usb 1-1: USB disconnect, device number 58 [ 975.155078][T13116] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 975.395059][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 975.515099][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 975.526166][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.537813][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 975.551277][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 975.558306][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 975.567608][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.576432][T13116] usb 1-1: config 0 descriptor?? 05:04:07 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x3, 0x2]) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x500, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) ioctl$int_out(r3, 0x5460, &(0x7f0000000040)) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xffffff7f00000000) 05:04:07 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe00000000000000) 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x600, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x700, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x900, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xa00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 975.855040][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 975.861432][T13116] usbhid: probe of 1-1:0.0 failed with error -71 [ 975.878153][T13116] usb 1-1: USB disconnect, device number 59 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xb00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xc00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 976.255043][T13116] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 976.504979][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 976.665021][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 976.676133][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.687203][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.697128][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 976.710251][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 976.716862][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 976.725901][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.734408][T13116] usb 1-1: config 0 descriptor?? [ 977.225572][T13116] elecom 0003:056E:00FF.0093: item fetching failed at offset 0/1 [ 977.233379][T13116] elecom: probe of 0003:056E:00FF.0093 failed with error -22 [ 977.426118][ T3229] usb 1-1: USB disconnect, device number 60 [ 978.194869][T13116] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 978.434831][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 978.554899][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 978.565855][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.577451][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.587785][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 978.601263][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 978.608170][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 978.617522][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.626297][T13116] usb 1-1: config 0 descriptor?? 05:04:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000000000904d8cd0d9a0100000921000000012201000905810300"/54], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_yield() 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xd00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0xa, 0x80000006) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$setlease(r0, 0x400, 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0xffffffff00000000) 05:04:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1000000000000000) 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xe00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xf00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1100, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1200, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1300, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 978.894830][T13116] usbhid 1-1:0.0: can't add hid device: -71 [ 978.903170][T13116] usbhid: probe of 1-1:0.0 failed with error -71 05:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1400, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 978.974247][T13116] usb 1-1: USB disconnect, device number 61 [ 979.374750][T13116] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 979.654805][T13116] usb 1-1: device descriptor read/64, error 18 [ 980.044759][T13116] usb 1-1: device descriptor read/64, error 18 [ 980.314749][T13116] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 980.604728][T13116] usb 1-1: device descriptor read/64, error 18 [ 980.994685][T13116] usb 1-1: device descriptor read/64, error 18 [ 981.114683][T13116] usb usb1-port1: attempt power cycle 05:04:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) clone3(&(0x7f0000000380)={0x18011000, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000100), {0x3b}, &(0x7f0000000140)=""/75, 0x4b, &(0x7f0000001c80)=""/4096, &(0x7f00000000c0)=[r1, r0], 0x2}, 0x50) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1500, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000100)=r6) 05:04:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000040)='}\x00') syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1100000000000000) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1600, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1700, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1c01, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1d00, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1e01, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 981.824593][T13116] usb 1-1: new high-speed USB device number 64 using dummy_hcd 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x2000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x3000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000010008, 0x0) [ 982.314528][T13116] usb 1-1: device not accepting address 64, error -71 05:04:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x4000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 982.684541][T13116] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 982.784553][T13116] usb 1-1: Using ep0 maxpacket: 16 [ 982.914549][T13116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 982.925558][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.936906][T13116] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.946840][T13116] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 982.960067][T13116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 982.966791][T13116] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 982.975822][T13116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.984334][T13116] usb 1-1: config 0 descriptor?? [ 983.665050][T13116] elecom 0003:056E:00FF.0094: item fetching failed at offset 0/1 [ 983.672859][T13116] elecom: probe of 0003:056E:00FF.0094 failed with error -22 [ 983.866238][T13116] usb 1-1: USB disconnect, device number 65 [ 984.644397][T22399] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 984.884381][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 985.004486][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 985.015463][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.027065][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.037326][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 985.050832][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 985.057905][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 985.067225][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.076068][T22399] usb 1-1: config 0 descriptor?? 05:04:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$TIOCSCTTY(r1, 0x540e, 0x1f) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0x8, 0x440, 0x8000}, 0x10) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) signalfd(r3, &(0x7f00000000c0), 0x8) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1, 0x0, 0x19}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:04:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x4, {0x7, 0x1f, 0x4, 0x0, 0x7ff, 0x403, 0x200, 0x1}}, 0x50) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1200000000000000) 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xe002, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0xfffffffffffffd01, &(0x7f0000000080)={0xd2ef4b2df2d5917b, 0x0, 0x2b, {0x2b, 0x7, "6ce508a2678eff5905dd27d6a7101c0536ea3ee89cc6bf6239d92a09232d528ceeb7aa01d96dceb9bd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:16 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000010008, 0x0) 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xfc03, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x101000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x200000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x202000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 985.254419][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 985.260797][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 985.271861][T22399] usb 1-1: USB disconnect, device number 66 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x300000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x400000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 985.624362][T22399] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 985.864295][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 985.984331][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 985.995802][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.007474][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.017917][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 986.031391][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 986.038325][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 986.047704][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.058422][T22399] usb 1-1: config 0 descriptor?? 05:04:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @multicast2, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, r2}, 0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x402001, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2500000000000000) 05:04:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r4, r6) getgroups(0x2, &(0x7f0000000180)=[0x0, r6]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x1}, {0x8, 0x3}, {0x8, 0x2}, {}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4, r7}], {0x10, 0x5}, {0x20, 0x2}}, 0x94, 0x1) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xa262, 0x3, 0x0, 0xf1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) [ 986.534638][T23988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 986.624279][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 986.630290][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 986.638341][T22399] usb 1-1: USB disconnect, device number 67 [ 987.314211][T22399] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 987.554194][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 987.674247][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 987.685268][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.696889][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.707209][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 987.720662][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 987.727640][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 987.736973][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.745782][T22399] usb 1-1: config 0 descriptor?? 05:04:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000010008, 0x0) 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x80ffff, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/103) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fcntl$lock(r6, 0x25, &(0x7f0000000100)={0x2, 0x4, 0xb3, 0x7, r0}) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000040)) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x19, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000080)=0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x8112, 0x4) 05:04:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000000000000000) 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 987.984595][T24048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1204000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x2000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x3000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x4000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 988.084200][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 988.090933][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 988.119644][T22399] usb 1-1: USB disconnect, device number 68 05:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x5000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 988.624112][T22399] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 988.874062][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 989.024126][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 989.035158][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.046839][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.057145][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 989.070621][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 989.077546][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 989.086948][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.097485][T22399] usb 1-1: config 0 descriptor?? [ 989.584646][T22399] elecom 0003:056E:00FF.0095: item fetching failed at offset 0/1 [ 989.592477][T22399] elecom: probe of 0003:056E:00FF.0095 failed with error -22 [ 989.785158][T22399] usb 1-1: USB disconnect, device number 69 [ 990.554002][T22313] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 990.793951][T22313] usb 1-1: Using ep0 maxpacket: 16 [ 990.914013][T22313] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 990.925146][T22313] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.936781][T22313] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.947090][T22313] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 05:04:22 executing program 4: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x3fffe, 0x4000000093}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r3, &(0x7f0000000100)={{r4, r5/1000+60000}, 0x14, 0xa096, 0x5}, 0x18) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) r7 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r7, &(0x7f0000000180)='net/xfrm_stat\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000500)=""/23, 0xfffffffffffffe6c}], 0x4, 0x4) 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x6000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffefff7f00000000) 05:04:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000340)={0x9, {{0xa, 0x4e20, 0x100, @remote, 0x7ff}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x56, @mcast1, 0x1000}}, {{0xa, 0x4e21, 0x1, @private1, 0x3}}, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0x1}}, {{0xa, 0x4e21, 0x3ff, @mcast2, 0x6816}}, {{0xa, 0x4e23, 0x6, @private2, 0xfffffffa}}, {{0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x2}}, {{0xa, 0x4e22, 0x67a, @mcast1, 0x6}}, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x7}}]}, 0x490) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) [ 990.960648][T22313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 990.967669][T22313] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 990.977007][T22313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.985810][T22313] usb 1-1: config 0 descriptor?? 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x7000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x8000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 991.024009][T22313] usb 1-1: can't set config #0, error -71 [ 991.039114][T22313] usb 1-1: USB disconnect, device number 70 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x9000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xa000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r6, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xe4, r7, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcfc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x91}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x440) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r8, r10) 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xb000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xc000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xd000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x1, 0x0, 0x5, 0x0, 0x2, 0x10080, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x100000001, 0x3}, 0x50, 0x3, 0x7fff, 0x3, 0x1, 0x8, 0xfff}, r0, 0x10, r3, 0x3) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) r8 = syz_open_procfs(r0, &(0x7f00000000c0)='stack\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) [ 991.543926][T22313] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 991.783870][T22313] usb 1-1: Using ep0 maxpacket: 16 05:04:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xe000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 991.903967][T22313] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 991.915325][T22313] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.931121][T22313] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 05:04:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffff7f00000000) 05:04:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xf000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x6}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x81, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fbd86196"}, {0x5, 0x24, 0x0, 0x596}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x95, 0x90}, {0x6, 0x24, 0x1a, 0x400, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xfb, 0x9, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfa, 0x5, 0x80}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x80, 0x68, 0x2, 0x8, 0x55}, 0xd5, &(0x7f0000000340)={0x5, 0xf, 0xd5, 0x5, [@generic={0xb2, 0x10, 0xb, "28e51bf35c1ba81bde94051ab4ffcefc38fc036e8d4269e1154bbc8adf920a831c8baf3fadc671773277fb7137b7dd3bd645dc6c20e6fd6b46d6cc3736ac365a1f9db36fef874b7edc3e2349b26851f0c90bc0ff0d8b8a4e62478b7330e046010713eabc127ed3b6d091b02517bb0359833bc04f087455bc9fd4623dfed934f88f84ca40975f5838e394a933c197c88e71d67a3a3f0776646355bdaa7e8ec3bb4d05d87807b61806f3a80bffcc62ba"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xfb, 0x1, 0x50}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0xed, 0x5}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc07}}, {0x1b, &(0x7f0000000200)=@string={0x1b, 0x3, "d5313b755ec1f2ff6fd7077c03fb5521376a8bb6a168fb6340"}}, {0x65, &(0x7f00000004c0)=ANY=[@ANYBLOB="6503106611cf89b884259b3c0b4f13ad3da17ab87669f305eea863f3153ea8e76905c1af6071581690974a6f21ef5170d80f39246d7eb9e8740ec153052c090000005094140779d063e079e4f0540e31bafe601cf79b8b8af2e314101c948a4b718b9571cc801393b71b456e55e5"]}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000480)=0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) fcntl$setlease(r4, 0x400, 0x2) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x800000, 0x3, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x10000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x11000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 991.941412][T22313] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 991.954977][T22313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 991.961558][T22313] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 991.973492][T22313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.986719][T22313] usb 1-1: config 0 descriptor?? [ 992.313816][ T3229] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 992.464404][T22313] elecom 0003:056E:00FF.0096: item fetching failed at offset 0/1 [ 992.472252][T22313] elecom: probe of 0003:056E:00FF.0096 failed with error -22 [ 992.669381][T14030] usb 1-1: USB disconnect, device number 71 [ 992.693878][ T3229] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 992.709220][ T3229] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 992.883845][ T3229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.892886][ T3229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.901379][ T3229] usb 2-1: Product: æ˜ì¼‘뢉▄㲛伋괓ꄽ롺楶׳꣮ï£ã¸•îž¨Õ©ê¿ç… á™˜éžæ½Šî¼¡ç‘࿘â¹ç¹­î¢¹à¹´åâ°… [ 992.913391][ T3229] usb 2-1: Manufacturer: ㇕画셞￲í¯ç°‡ï¬ƒâ…•æ¨·ëš‹æ¢¡æ» [ 992.921273][ T3229] usb 2-1: SerialNumber: syz [ 993.453767][T22313] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 993.693717][T22313] usb 1-1: Using ep0 maxpacket: 16 [ 993.823768][T22313] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 993.834801][T22313] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.846024][T22313] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.855972][T22313] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 993.869093][T22313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 993.875697][T22313] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 993.884728][T22313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.893237][T22313] usb 1-1: config 0 descriptor?? 05:04:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) close(r0) fcntl$notify(r0, 0x402, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010000000d155218fa9431fc3374200090400898003130000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x12000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xfe, &(0x7f00000000c0)="91041cfd600ec0530268314cb789e8bc1059106ee7d85c5ab89f1cabbfd68e61473ace19ee91a4b172f04d09a5eb337dce1a7133b7ff735ffea164b3a414ecca7c18080a84883a5695fb640d30167fc7618f1371284a79860e500146f9814c26f8a1c8836473d0557f07e975ad0d1cef929e79ea66c9064f96f22c3532264f2b4be4eea82aa53efd20c35d5edbc3ab6be991b14fda8ac6318d243e593e40c8d3dd2e9b90819003a027df0314c5dd49cb2f", 0xb1) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffffff00000000) 05:04:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x13000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x14000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 994.184275][T22313] elecom 0003:056E:00FF.0097: item fetching failed at offset 0/1 [ 994.192068][T22313] elecom: probe of 0003:056E:00FF.0097 failed with error -22 [ 994.203964][T22313] usb 1-1: USB disconnect, device number 72 05:04:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x15000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x16000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 994.713695][T22313] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 994.953626][T22313] usb 1-1: Using ep0 maxpacket: 16 05:04:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x17000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)=""/53, &(0x7f0000000140)=0x35) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0xf2, &(0x7f00000000c0)="4dc1c0c94961e2f48805a0a349735bf44c3c8b58bab2ba739a9653c6260bf6c944ed2975ca00369cf151691d74a80041ec9089939dcf10646318bb045eb54f0bc53510d7b8e5ab3180a598d874f55a3d227cfdb9b48ca45e6bcfbf9f9d8dd55b686f8b6aeea410c1f25ea0baf44b66161d896b") vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socket$inet6(0xa, 0x1, 0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 994.993693][T22313] usb 1-1: too many configurations: 31, using maximum allowed: 8 05:04:26 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 995.053650][ T3229] cdc_ncm 2-1:1.0: bind() failure [ 995.059610][ T3229] cdc_ncm 2-1:1.1: bind() failure [ 995.081468][ T3229] usb 2-1: USB disconnect, device number 86 [ 995.114173][T22313] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 995.121745][T22313] usb 1-1: can't read configurations, error -61 [ 995.303589][T22313] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 995.543597][T22313] usb 1-1: Using ep0 maxpacket: 16 [ 995.583663][T22313] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 995.713644][T22313] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 995.721242][T22313] usb 1-1: can't read configurations, error -61 [ 995.727811][T22313] usb usb1-port1: attempt power cycle [ 996.433546][T22313] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 996.523559][T22313] usb 1-1: Using ep0 maxpacket: 16 [ 996.563614][T22313] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 996.683571][T22313] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 996.691149][T22313] usb 1-1: can't read configurations, error -61 [ 996.843470][T22313] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 996.943547][T22313] usb 1-1: Using ep0 maxpacket: 16 [ 996.983589][T22313] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 997.103531][T22313] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 997.111090][T22313] usb 1-1: can't read configurations, error -61 [ 997.117421][T22313] usb usb1-port1: unable to enumerate USB device 05:04:28 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) read$hiddev(r1, &(0x7f0000000000)=""/39, 0x27) 05:04:28 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1c010000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000001031e7a000000000000000001400005"], 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) preadv(r2, &(0x7f0000000500), 0x37d, 0x0) r4 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@initdev, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000280)='ns/pid\x00') 05:04:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x35, 0x2, 0x0, 0x0, 0x1, 0x2, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x4000a, 0x9, 0x400, 0x5, 0x0, 0xabf5, 0x5555}, r0, 0x10, r5, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:04:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) r5 = eventfd2(0x33c, 0x0) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="d6d13cbd7989a84670d4319491f4efb4f202d74d2f84eac546a07596b8feb2deb38184eb2ae549681e53e78111ee061c7a7b1b5b957a9eaff2ddadb19f496cd842a0fd1a124b1adda4322980e2e5b46d50424595905c6d799cb026b4b634c0531b56ce44e9e5bb99d32332b419d5e95860fc6fdf179ff979cb9c7239713bf32df598dbe97e03f0def1da6f5e05cda708fec10f6910e6abea5a77b9670ae1624150defe1f3b71ea43b075da3ad2d29654c839a5b8d5770e9b256811ff148ca1d0ac1216b880dc87e220af5e9b50debc51893c7e3acdab83fa2cf82c7028c5e5d0f8913d7b72b7d83e3986", 0xea, 0xffffffffffffffff, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000200)="e9b7813b3627d9d68668897c99a0b6a703d8243ef998c2c03648bdebb01e29c714a17a9aa05e6fa067b47313e3ec7db3150a227aaf8d5a0e24adabab89cb490e9dfcbf087b55de03899cfda576e1beed19036c8ae0b233ce91f3a1a58837078f4065e4acc7e07b42066ec58723cffeb3582529675f7ffaef08ee0708724694a213caeb51ec7342b57fbc40902da5", 0x8e, 0x7, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x7be, 0xffffffffffffffff, &(0x7f0000000440)="a75627fcf783d2dd6991e3905f77b3626901ec475b8427ed99676ca1ed8d393d23b5ca8312d649b81abab6b72e34f3dfe8d3f575ec7e90d629fc8304b6", 0x3d, 0x2, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xcf68, r2, &(0x7f00000004c0)="436b0babe19994a2f0dbf71470a5654d682472dcb885cbda42f8cc402874378231fcef0d2526a141436842b3242142de3df45c6847d52a697c5feb", 0x3b, 0x200, 0x0, 0x3, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff, &(0x7f0000000900)="765c92a533af1b8ad952ba641bcffafdd36d2dd9afeef3be300dd648679bb03667518e7b077e0500cbaa7fc3c4a34d8ddf7ffea09cc084513a2ab5e88bdc99f0ccf75b1f41365f296f42955b66aed0e859118b7d5c0934b1e5198adec0c96c34e01fb980f61a771be4cba1beefceae2e1849b71094c64a869368f00a80ee38915d4e3c9e5defc0bb5448ce267c6b7301f7b482add7bd6176c0de0efa45a5b467d7285a30abc1c3e26bbdfd39299051da7a907e38d731151aa9e4a7993863aa2b1843ea8325c64aef59095c67259938ce51d5307659d21791dddcfc06fa60bb3bfda49b8223ba5111", 0xe8, 0x8, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0xae72, r2, &(0x7f0000000680)="f2f3a24d96d184fa", 0x8, 0x9, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x40, r4, &(0x7f0000000700)="ee3cac7400f659fdbbac1cd4101e59b677e463e15de2a3b5160c342fd8f1f2cd0d346dc33ae4551be6bc999e214a44444de9f9236d69c63511a578290339fa35b52552c8644b70be120f607634a530753dbe9fbecc1a0a497b4a1abd0cea95cf400f697428a3c237f74d2ec456603e154b2afe72e9069f1fad61d2eaf98d92801b0c4aad9860d3b24251e4293c81b264f530512baf8cc116b9d9a25844ba935d82244f", 0xa3, 0x1e, 0x0, 0x1, r5}]) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x100000000000000, 0x4, 0x5}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1d000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x1e010000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x40000000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x80010000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xe0020000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xfc030000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x2) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0xffff8000, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="84a9b700c9f5ab56e52cf601aa51dc50c68fc6c36c05ace85cffaec8dd220ad70b6853acdef4392b000000005d6275c8a9b9d11d678998dffa9a20c140", @ANYRES16=r2, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x44000) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000340)="ffeb503e2b027b6121902424cccabf3694c8d91ed11012fc37ab4293406b157d1968ac52373104db2773d7ab9d3007fad1b5fcf44faab1332489d7b12721912d10f2e780d1df54d48ef1fbeb052ef483fb8ad3f0396b52ff0e8792719aff2dba9d08a3972e860a3df87b492c0958a21c6f5c59c01c9ea871f670ad57d43cfec11716c42caf1805e9bb83032656987924823e1aae59856a08513d3480126ab69654d622bc4b2ed093e808e73daa9cc56cfe985647616b", 0xb6, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) keyctl$revoke(0x3, r4) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sendmsg$sock(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@default, @null, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)="bcbf23ccc7a6743e41706c090484a8e43aab1e639be3ca3a12eda05fcfccdf5024986011dd405ec5bc71b6aa6a2a94c2e35d61c4b8e88d8091425d8b0f149fc6d9e8bd4c12ec000c31855f47759cf52aa3e55f6a7c52481a0cd1987e7eb176793b4a6f280fbe7bbe45347bcb4a0b65a641d4755ef58fea8be1833a3acbf4ac156a1f95d0ea2dcff4d5b8e0d19756e97f7d8449", 0x93}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xae}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}, 0x10080) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x2e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 998.843387][T14030] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 999.103378][T14030] usb 1-1: Using ep0 maxpacket: 16 [ 999.223397][T14030] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 999.234493][T14030] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.245737][T14030] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.256264][T14030] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 999.269398][T14030] usb 1-1: config 0 interface 0 has no altsetting 0 [ 999.276013][T14030] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 999.285049][T14030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.293629][T14030] usb 1-1: config 0 descriptor?? [ 999.763926][T14030] elecom 0003:056E:00FF.0098: item fetching failed at offset 0/1 [ 999.771807][T14030] elecom: probe of 0003:056E:00FF.0098 failed with error -22 [ 999.964621][T14030] usb 1-1: USB disconnect, device number 77 [ 1000.733256][ T3686] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1000.973213][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1001.093262][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1001.104239][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.115861][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.126095][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1001.139547][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1001.146443][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1001.157179][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.165924][ T3686] usb 1-1: config 0 descriptor?? [ 1001.463755][ T3686] elecom 0003:056E:00FF.0099: item fetching failed at offset 0/1 [ 1001.471558][ T3686] elecom: probe of 0003:056E:00FF.0099 failed with error -22 05:04:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) write(r3, &(0x7f00000000c0)="46dabc59b5b38f5fbe8920972e374865b0750008bc7f39f4f4843ab8b6c1d481d9a0eee9cc56f65a0d844afce593bdaaf047bdeede2629b5aad37429d16a91cc8c0f6dc6ac8151631ef9e79b3e26eb30cd84bb8b9884b606801c96a618339710a84c556341c072dfb4e2226abce77e7b9641717d", 0x74) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 05:04:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x2, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000240)=0x7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x8080) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x404282, 0x100) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1dc, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x514e}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x3a}, 0x543e}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4810}, 0xc4) 05:04:32 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x10}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff004000000000010902240001001d0000090400898003010000092100000001220100090581030000000000"], 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x7, 0x1, 0x7}, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00', r5}, 0x30) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x4, 0x1}, &(0x7f0000000740)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$P9_RXATTRWALK(r8, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x4}, 0xf) [ 1001.566524][T14030] usb 1-1: USB disconnect, device number 78 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x3, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x4, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x5, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x6, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @empty}, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 1002.033128][T14030] usb 1-1: new high-speed USB device number 79 using dummy_hcd 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x7, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x8, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1002.273084][T14030] usb 1-1: Using ep0 maxpacket: 16 05:04:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x9, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0xfff, @mcast1, 0x10000}, 0x1c) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48041}, 0x40000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r5 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x1000)=nil) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 1002.403159][T14030] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1002.416392][T14030] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.427932][T14030] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.438217][T14030] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1002.451529][T14030] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1002.458177][T14030] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1002.467326][T14030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.477982][T14030] usb 1-1: config 0 descriptor?? 05:04:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x51, 0x0, 0x8000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x3c1140) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x5, 0x9, 0x0, 0x0, 0x1b, 0x40000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x34, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1000, 0x4, 0x2, 0x0, 0x5, 0x10, 0x8}, r4, 0x7, 0xffffffffffffffff, 0xc) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200), 0x10) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0xc6000, 0x80) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000080)=0x81) 05:04:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r4 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0x7, 0x5, 0x12, 0x1d, 0x0, 0x1, 0x6, 0x17, 0x1}) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0xa, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4805}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x80) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1004.652960][T14030] usb 1-1: string descriptor 0 read error: -71 [ 1004.754836][T14030] usbhid 1-1:0.0: can't add hid device: -71 [ 1004.762991][T14030] usbhid: probe of 1-1:0.0 failed with error -71 [ 1004.773615][T14030] usb 1-1: USB disconnect, device number 79 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0xb, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0xc, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0xd, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0xe, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1005.122897][T14030] usb 1-1: new high-speed USB device number 80 using dummy_hcd 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0xf, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1005.362869][T14030] usb 1-1: Using ep0 maxpacket: 16 05:04:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x10, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1005.482955][T14030] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1005.499530][T14030] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.522979][T14030] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.533130][T14030] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1005.546532][T14030] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1005.553542][T14030] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1005.562602][T14030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.571662][T14030] usb 1-1: config 0 descriptor?? 05:04:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f00000000c0)={0x3, 0xffffffff, 0x2}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x11, 0x800000003, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) getsockopt$packet_int(r5, 0x107, 0x3, 0x0, &(0x7f0000000200)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)="0f1b435f", 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) preadv(r6, &(0x7f0000000500), 0x37d, 0x0) [ 1006.073446][T14030] elecom 0003:056E:00FF.009A: item fetching failed at offset 0/1 [ 1006.081241][T14030] elecom: probe of 0003:056E:00FF.009A failed with error -22 [ 1006.280902][T14030] usb 1-1: USB disconnect, device number 80 [ 1007.052812][ T3686] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1007.292749][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1007.422803][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1007.433782][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.444808][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.454880][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1007.467985][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.474617][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1007.483636][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.492146][ T3686] usb 1-1: config 0 descriptor?? 05:04:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x0, 0x9, 0x4000000000010000, 0x0, 0x0, 0xa0ae}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000540)) sendmsg(r3, &(0x7f0000000500)={&(0x7f00000000c0)=@phonet={0x23, 0x5, 0x0, 0x40}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="25a5282374a61d33e9f108b781e7aa7a8a10239051cbe991b7ec8cc34bdb4c18a359", 0x22}, {&(0x7f0000000180)="cba025a982d9f384541659c6901ca432fe4b6cf4be67059c2fa135ca39", 0x1d}, {&(0x7f0000000340)="884eabd4618cb26d3a38e2ef2b817d723714646bcd4b636b49e5a903450fbf7c9387214e895c41a8f23e113b60ab93cb4bdcde555dcb3fe26e85625561b2a7f2b17a36c56509821dda593e49443bd095391267e62986793aeeb7fb3339b470eb37f9169019641c12f6739b4ed133f06c3fe749947cedee8dd949959ec00c0dfd6695c4237557ba041ca72187afef82ad3e54ad09b12b5d2bd63a386d117d260cc6670080666712103c4802264311fcf25944a54ab38d86ab035fce0da67643c3c21e268784a1", 0xc6}, {&(0x7f0000000200)="27010edff6d82152fe7264", 0xb}, {&(0x7f0000000440)="48191fc24650847e09fa84789e0c4c6ac65bad728fe488d62a1f36ba8fd95762de74232cb6e20e94a413437a5f2d66a8734136feef906b9b511892d78ccbdf10fb7581d146da9d9697fbd558d72432120983086d05b524f441543e50a9130dcf81f3cb4448293ce8f51316de512317a627c6992b8934614ebaebf8eb46d4ba386a54f5cb8462d68f24e7cac6b1543ddac67d68ece5f5db3bd34b29864c9c2a11d25e1ac52e9547162eb909a13a121b06eec2a67affbeb6b435c6a3519eccf1", 0xbf}, {&(0x7f0000000900)="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", 0x1000}], 0x6}, 0x8000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x11, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:39 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) keyctl$clear(0x7, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000dcf922a21043790000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf2502000000050001000000000014000200fc020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x8045}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/sockstat6\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x6, 0x1, 0x0, 0x7f, 0x8, 0x34, 0x1000}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x5, 0x3, 0x5, 0x3, [{0x100000001, 0xffff, 0x1, [], 0x200}, {0x7, 0x1, 0x6, [], 0x3000}, {0x5, 0x8, 0x3, [], 0x100}]}) 05:04:39 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x4, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x10000, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000200)=0x81) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x39c, 0x1, 0x7, 0x2, 0x19, "9528c8ac9021fed023ae2fcd52ba58f1540a69"}) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x12, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1007.740329][ T3686] usbhid 1-1:0.0: can't add hid device: -71 [ 1007.748389][ T3686] usbhid: probe of 1-1:0.0 failed with error -71 [ 1007.760698][ T3686] usb 1-1: USB disconnect, device number 81 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x13, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x14, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x15, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x16, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1008.122703][ T3686] usb 1-1: new high-speed USB device number 82 using dummy_hcd 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x17, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1008.372663][ T3686] usb 1-1: Using ep0 maxpacket: 16 05:04:39 executing program 1: prlimit64(0x0, 0x5, &(0x7f00000001c0)={0xb, 0x400000008f}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) close(r0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'netdevsim0\x00', 0x7fff}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x10000044, 0x2000001, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x1d, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f00000000c0)="7d4e28d369b51a73ed56d2124e99821a0c75e063810153f2ba2632e14213fdeeab6869d50f3a7fa8d9c702f6fe6ec8354077cfe9362a759531b4b5fc1267dc0577caf1658bf63c976bd0afbebfc3190ac92dbbbf95a6f30a950a5aff747c67cc3e3f7bce459f40b62d264909125fd77401be08c6fe382562196ba6ff490189ae8353bdfe0af27fdb6d0535f8a75583869aaaa5754ed91936ea9e719e84358cfe690756523e3cdeb6da5e35b476fb8e", &(0x7f0000000340)=""/205}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') membarrier(0x4, 0x0) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 1008.502703][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1008.534994][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.557278][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.582305][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1008.601826][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1008.608654][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1008.632001][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.643348][ T3686] usb 1-1: config 0 descriptor?? [ 1009.123300][ T3686] elecom 0003:056E:00FF.009B: item fetching failed at offset 0/1 [ 1009.131106][ T3686] elecom: probe of 0003:056E:00FF.009B failed with error -22 [ 1009.583790][ T3686] usb 1-1: USB disconnect, device number 82 [ 1010.352545][ T3686] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1010.592512][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1010.712566][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1010.723526][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.734579][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.744494][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x19, 0x0, 0x0) close(r4) vmsplice(r4, &(0x7f0000000600)=[{&(0x7f0000000100)="02c1612563906a3e3b9073d7e8ee1d9a21bda95e11ea021e1d126dfa5a2f67ba4b80e7fa59bc097eecdf22565ef3803ef3515aa404904c95b372564126c76c9923b648ee0309e0f77559d2c8fee7f896f76972d75ee06e7d25ba858daf70f361ab3bb517", 0x64}, {&(0x7f0000000200)="14727f5af64dce8117583227cff6a44487aa4a5c117c7dcb64eb66186a15bb3723dd40459de5ec79260465a7870e3fc7c30810cadc645801dbacbe84202cd378c5c92a1a37ea6ffda16cfd0cf5467a3d69bd84647043e7ed128b45f7814fd0b3ee3ac86f931a18658837d28140665001538480337b916c40202c6d052c86c9d87b5dcdcb38c086b94a15", 0x8a}, {&(0x7f0000000340)="498a243933d17f41b590a99732ffcb797e29dc12b1acf74b262d4a5be6d72cb662e8cb8e80fe518c396965347aa8539b6ef587d0d5d553224ea3005406bc561bd3fb2a50cd94424033f30969d7bb4080fec1c821121494963d12b89fa495101c0437c1171c3bbc2cd11a39bb8162eae5e793ed1b695931b3eb4130cd434bdad3b01a8d6384ccc8d7b83095af380fc5b017b212bf5635c6c263d5410792", 0x9d}, {&(0x7f0000000400)="5675f81fed06650f099e81e59a26132c8f8d570ad241ee918f9f07f09cdddcbf0753d538bb7333f263a8d419d4ba1f967ba68278768c8dc0350dfe5c8e4bb818bd4062aab757995059e33170c077731e66593bfd2f55a8dc", 0x58}, {&(0x7f0000000180)="bf5e36c5442a4e31baaa0de2cdb8cee61879c5", 0x13}, {&(0x7f0000000480)="34e107adab5978d2491b04a751e6194d663bad", 0x13}, {&(0x7f00000004c0)="61d57dac10a27c5bed16e3f561a82cbd6a649bb51967c2626ae4abf09c2027ec84685292951a75c1e254ce8124f50e097bae14f2f61a7a6d30", 0x39}, {&(0x7f0000000500)="12f64a2eca1faa76ba6106bb74ac6f76fda88f13a51befb45b792ac0fbcfeab10b2ed7538ce352fc7c4d2a46348fb9987943a62327cb386f880092b3ca406447c532ad77ed89d06f65bdda7ba261376d6d79bfce64f70135784e0dfd720dfe0b7dc557cf9d018200b22b52f5ab21926848b8156a81c1e4c02c4cfc89153bbf2e2cc2d39e093d0172eac2a7b6cdd4f5633feafcf57f3cd30935d567ff825d2d1c440efa320d358b13bf7ee356f117a313fae4c545cd3db66f531586bb6e90519d9e8c111c9c60bf5ca64a9fd236e901557576a35d537a3a06e4e323bd", 0xdc}], 0x8, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000680)={0x2, 'syzkaller1\x00', {0x3}, 0x8}) 05:04:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) close(r0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x19, 0x0, 0x0) close(r5) bind(r5, &(0x7f00000000c0)=@ethernet={0x306, @random="7f425b6a8074"}, 0x80) [ 1010.757622][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1010.764249][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1010.773284][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.781818][ T3686] usb 1-1: config 0 descriptor?? 05:04:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e05ff004000007ad85d7887e6c009e300000109022409040089800301000905810300"/53], 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902700002010000000904000001020d0000052406000105240000000d240f0100000000000000000806241a00000007240a080108e508241cf8ff03800005240102200905810340000000000904010000020d00400904010102020d0000090582020002fd0300090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000040)=""/203) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x2e, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) [ 1010.806759][ T3686] usb 1-1: can't set config #0, error -71 [ 1010.824610][ T3686] usb 1-1: USB disconnect, device number 83 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x5f, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x5f, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x3c) 05:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 1011.182468][ T3686] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1011.432472][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1011.472562][ T3686] usb 1-1: too many configurations: 93, using maximum allowed: 8 [ 1011.592491][ T3686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1011.600165][ T3686] usb 1-1: can't read configurations, error -61 05:04:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCCONS(r3, 0x541d) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="be0d00000000000002004e220a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414bb00"/912], 0x390) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x7f, 0x4, 0x0, 0x4}) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 05:04:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x80000001) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103c00, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) 05:04:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x1, [], "63d4fbe26fba9a0918cd64909692f4c6"}) [ 1011.754206][ T3686] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1012.002495][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1012.042905][ T3686] usb 1-1: too many configurations: 93, using maximum allowed: 8 [ 1012.192412][ T3686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1012.200041][ T3686] usb 1-1: can't read configurations, error -61 [ 1012.206576][ T3686] usb usb1-port1: attempt power cycle [ 1012.912363][ T3686] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1013.002422][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1013.042424][ T3686] usb 1-1: too many configurations: 93, using maximum allowed: 8 [ 1013.172359][ T3686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1013.180007][ T3686] usb 1-1: can't read configurations, error -61 [ 1013.342326][ T3686] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1013.432392][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1013.472407][ T3686] usb 1-1: too many configurations: 93, using maximum allowed: 8 [ 1013.592339][ T3686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1013.599948][ T3686] usb 1-1: can't read configurations, error -61 [ 1013.607024][ T3686] usb usb1-port1: unable to enumerate USB device 05:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x4}, 0x3c) 05:04:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xff, 0x2, 0x0, 0x5, 0x0, 0x1, 0x9}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x1) 05:04:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x724342cc16e1b670, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0xe, 0xed, {0xed, 0x4, "004f184216f2e49ca91b0f38b2d25f6589d39a5b192692842234d324fec5a203b8894841403035a37014f10b4853ae1799c611a879c99aaaec43abbe8b84ca55183a996eca0883d1ef52ef4a3bbb8f55338335535f647f658f595afb820a3865d02d49e28d12ceff9dd3a044ddfe6af77b4ff94b8182caf8176aa2da50806815e51f8014da55749e1c01d8663d922019e6b3c40c81aae6461f5ef44055f1017fd00e95305e5a1a72c2c2b771748ad1824a980f1df43dc0e7523c9be3b8272206f15deb1541c90aa8ece096cb4400c5dd2f942b24e45c7c15afd1cbf5e11d6fa67d27114ef8fc436d2118c9"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xa, "a4f184e9"}, @main=@item_4={0x3, 0x0, 0xa, "60120c37"}, @global=@item_4={0x3, 0x1, 0xe, "739a851f"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0xfe, 0x1, {0x22, 0xa3c}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0xcb, "0731cf9ddbf48d944d7c2ee862f2c66d6b1688cea218037f71e9932baa1d0cf1e508af85e00075f4899c0097dfed76f852d7ae26957402a6d59496d19feb693b1e76812e9213495a32f02a58b9cf16ad12056b5b11dfc5fba8ed53a3b68ee9a068ced8d17122cbe6043a5fb92a9a4b7078f123979563d18884f9dbb7007ad8a4218ae264203a4f5d97744e93f2fe412ec7cdbc04aa4598b20630734d4e2f71346f98e6db06b0bf990fba6b6bf1ec972f3a0aaa9f751c898052c7ac8e89e356a620bb9de628ae71d6f7d80a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x7c, "5e44050a26537ae9e98882657bd21acbcbaa371fb4b136da01d5d0f44d9df78af0118f3392ca3382483ce8b3155f3ba2aa83535f3ccd40b7fa156c47f703c5461fdb9472368c218692a80df0d7eb287d378b97e434664d31163d53f6f5f2813ddc4b1731a5ff1e711b725813d920c1315a5febeada84d80527fa521d"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7f}}) 05:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) 05:04:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@ipv6_newaddr={0x70, 0x14, 0x2, 0x70bd2c, 0x25dfdbfc, {0xa, 0x40, 0x20, 0xc8, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x5bd, 0x6, 0xfffffffc, 0x8}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_FLAGS={0x8, 0x8, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) 05:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x6}, 0x3c) 05:04:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setns(r5, 0x2000000) 05:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x7}, 0x3c) 05:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x8}, 0x3c) [ 1014.302228][T22399] usb 1-1: new high-speed USB device number 88 using dummy_hcd 05:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x9}, 0x3c) [ 1014.562240][T22399] usb 1-1: Using ep0 maxpacket: 16 05:04:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400000, 0x0) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000040)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x27, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r7 = dup(0xffffffffffffffff) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x8, 0x70bd26, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4080000}, 0x4000004) preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:04:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xa}, 0x3c) [ 1014.692292][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1014.704426][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.718254][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.728755][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1014.762939][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1014.769540][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1014.778573][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.788935][T22399] usb 1-1: config 0 descriptor?? 05:04:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socket(0x11, 0x800000003, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) [ 1015.252763][T22399] elecom 0003:056E:00FF.009C: item fetching failed at offset 0/1 [ 1015.260656][T22399] elecom: probe of 0003:056E:00FF.009C failed with error -22 [ 1015.461491][T24630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1015.470488][ T3686] usb 1-1: USB disconnect, device number 88 [ 1016.242113][T22399] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1016.482087][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 1016.602159][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1016.613137][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.624939][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.635155][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1016.648599][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1016.655489][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1016.664841][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.673584][T22399] usb 1-1: config 0 descriptor?? 05:04:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x19, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe8b0}, 0x0) getegid() r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) fcntl$setpipe(r3, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000000c0)=""/101) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xb}, 0x3c) 05:04:48 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) keyctl$invalidate(0x15, r0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x20, 0x0, 0x3, 0x2}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:48 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:48 executing program 5: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x180, 0x7be5bddc, 0x3, 0x0, 0x2}, 0x14) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000540)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000830000008300db6e13ba1ced154fa0bbb6d6bef9e25f7583d30c28509a0037f02a000054370d36094ee8e425f77f000000eeccbbb81de404708e86b64f1a4ed1bfa538ada450966c061b8cf8b3288d1120ba59d4d5fda5d4b3d4c76121cd9a7b9e000000000000000000000000af0000000000000000000000000000e16a6106de5a48bcd4"], 0x0}, 0x0) syz_usb_control_io$printer(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0xc, 0x72, {0x72, 0xb3c44d7facbe676d, "2df1303672bfefc20b3925d6d95119ed0cee6ec37aae9c1c840dd7bf3d044646aa47928d6f94f2c678adaf838856ef73eeccbfb5baf6562ce43394338b72e482bac02a825a30deb0f5811af4b22e79185c2771a6d98ae5328650e44db58cf7f13e63e0c4b101e3ea01d81ba68251aaca"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000640)={0x34, &(0x7f0000000400)={0x40, 0x9, 0x8b, "ff2520084694c0c0e573f23b53ebbcfee69bce9f179a6fbe915d921efa300a74c0758288c92c5fb4010e07d5b98e2df5193be022b454a489bb2f7c44ae3d1b46b53231a26b9a7a846e7ee1d5d514df4e2dd0ea1e539b794fa1c019bbc7795f04fd035e0cff6c5feb188f614d0b7d6bf715b93a47f7c7d39d6a386a9d6fe9ddb060550868224303b4a88f3b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x31}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000540)={0x20, 0x0, 0x7a, {0x78, "6cc695dcd958d1a0ff3da0c7f132e821bf110271642e246df6fafd3b437cd21d6ff88f82ea023d9597bf914c1b3bf8253ce3b0a48ad5e808171bb892bec8d527999e00956b518f987f54113b4399bf1698a1342c738da5efe401aff2cb911db93ab0f09ac6262cf893b7dd959a4e9ef7cf6bdf6c109a3b5e"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x1}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x9, 0x7bb2, 0xffff, 0x10, 0x1, 0x9, [], r4, r1, 0x0, 0x0, 0x3}, 0x40) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000000c0)=0x2) 05:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xc}, 0x3c) [ 1016.932152][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 1016.938268][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 1016.954832][T22399] usb 1-1: USB disconnect, device number 89 05:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xd}, 0x3c) 05:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xe}, 0x3c) 05:04:48 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$FUSE_LSEEK(r4, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x1ff}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 1017.322025][T22399] usb 1-1: new high-speed USB device number 90 using dummy_hcd 05:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xf}, 0x3c) 05:04:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 1017.571978][T22399] usb 1-1: Using ep0 maxpacket: 16 05:04:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x10}, 0x3c) 05:04:49 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010008, 0x0) [ 1017.692103][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1017.711391][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.726040][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.748889][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1017.783270][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1017.792375][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1017.801385][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.818733][T22399] usb 1-1: config 0 descriptor?? 05:04:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000040)={0x5, 0x3f, 0x5, 0x0, 0xff}) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x1, 0xfffffff9) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) [ 1018.302673][T22399] elecom 0003:056E:00FF.009D: item fetching failed at offset 0/1 [ 1018.310601][T22399] elecom: probe of 0003:056E:00FF.009D failed with error -22 [ 1018.503618][T24728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1018.512901][T22399] usb 1-1: USB disconnect, device number 90 [ 1019.281888][T22399] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1019.521879][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 1019.641946][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1019.652906][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.664526][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.674770][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1019.688215][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1019.695123][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1019.704531][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.713282][T22399] usb 1-1: config 0 descriptor?? 05:04:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x10000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = dup(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = dup(0xffffffffffffffff) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000040)='(\'\x00', &(0x7f00000000c0)='./file0\x00', r3) preadv(r3, &(0x7f0000000500), 0x0, 0x0) 05:04:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x11}, 0x3c) 05:04:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'geneve1\x00', {0x4}, 0x200}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4401, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000340)="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") sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x40}}, 0x890) 05:04:51 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010008, 0x0) 05:04:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x1000, 0x401, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000010801030000000000000000010000050500030084000000050003002f000000060002d44043f300"], 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:51 executing program 0: r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000020200000200"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000830000008300db6e13ba1ced154fa0bbb6d6bef9e25f7583d30c28509a0037f02a000054370d36094ee8e425f77f000000eeccbbb81de404708e86b64f1a4ed1bfa538ada450966c061b8cf8b3288d1120ba59d4d5fda5d4b3d4c76121cd9a7b9e000000000000000000000000af0000000000000000000000000000e16a6106de5a48bcd4"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xc, 0x54, {0x54, 0x21, "4ecf1f9f2da39bd648959e0a7e5a63cdb6becb5f09c7c69473222e402d8fc09a30b73fb08cb1f352a6b425c5cfa7a9bdb9f90cd5b52277aa8f2e2a845771ca53c4b01e5a12989cdafd8351933c91822a640b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000100)={0x1c, &(0x7f00000003c0)={0x40, 0x30, 0xfffffffffffffda8, "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"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xdd}}) iopl(0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, &(0x7f0000000240)={0x0, 0x2, 0x82, {0x82, 0x21, "536c5c5cd8568064593fc1e0444fa9a569d4dc256e3e8ca83feb2599a57db34648475796a2f5ab20860dc0a4089a4e6ed21c0725ce030446b3edeb1eb724c37a2f663c996cd3d94d3eb364a972da390f2fab4eeca4f1666b406de138cda8e5d06315259553b0a3eb4b3ac90f4bf4ac60a249fb6f80fcb8da85c8529fcfbc873f"}}, &(0x7f0000000300)={0x0, 0x3, 0x36, @string={0x36, 0x3, "ab9d99e3b7f90ca81f357b7343c695b8c05e1ec3b0aa4c864107120da9bec0f46ce490247cd087ef978ba4b9a07ede968e081402"}}, &(0x7f0000000340)={0x0, 0x22, 0xa, {[@global=@item_012={0x0, 0x1, 0xb}, @main=@item_4={0x3, 0x0, 0xa, "05d094d1"}, @main=@item_012={0x1, 0x0, 0x8, "99"}, @main=@item_012={0x0, 0x0, 0x5}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xea, 0x1, {0x22, 0xa8d}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x20, 0xa, 0x12, "7c1638cb61f6e0bac3819b4cb08e471f6c97"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x1, 0x1f, "d843fe9a3e026be72c5b05391e127afb85e8328a19b0055a2c60ca95e623b3"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x1}}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000200)) [ 1019.991894][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 1019.998250][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 1020.007255][T22399] usb 1-1: USB disconnect, device number 91 05:04:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x12}, 0x3c) 05:04:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xba, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x0, 0x2) 05:04:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x13}, 0x3c) 05:04:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x14}, 0x3c) [ 1020.361820][T22399] usb 1-1: new high-speed USB device number 92 using dummy_hcd 05:04:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) perf_event_open(0x0, r0, 0x4, r3, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x5) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000100)) 05:04:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x15}, 0x3c) [ 1020.611825][T22399] usb 1-1: Using ep0 maxpacket: 16 05:04:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x16}, 0x3c) 05:04:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000000c0)=0x1, 0x4) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 1020.741847][T22399] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 1020.750051][T22399] usb 1-1: config 0 has no interface number 0 [ 1020.780711][T22399] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xA has an invalid bInterval 32, changing to 9 [ 1020.792539][T22399] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid maxpacket 1879, setting to 1024 [ 1020.804085][T22399] usb 1-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1020.813789][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.822973][T22399] usb 1-1: config 0 descriptor?? 05:04:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x1, {{0x5, 0x1, 0x2}}}, 0x28) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x2000000000000, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$P9_RSETATTR(r2, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x7) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r5, 0x0) keyctl$assume_authority(0x10, 0x0) [ 1020.841816][T24821] raw-gadget gadget: fail, usb_ep_enable returned -22 05:04:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x17}, 0x3c) 05:04:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010008, 0x0) [ 1021.082155][T22399] input: GTCO_CalComp as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.219/input/input38 [ 1021.628323][T24884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:04:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000001c40), 0x0, 0x2061, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/51) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x0, 0x0, 0x3, 0x3, 0x2, 0x4, 0xfffffffe}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = accept$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000340)=""/227, &(0x7f0000000200)=0xe3) 05:04:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1d}, 0x3c) 05:04:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0x5, 0x43, {0x43, 0x23, "2ad1e770a4f4e561dd6d2a052358391bac83ce03866a63bd0e11effd99e29e7f66cffa76178a9585cb50014627017cd83e0a8b8989fa2ac9309adc9343da92da38"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x13, 0xd2, "ef70bc978ccb9c3b21aa1cff806c95fa1eca0b80a95a93a86f423245f6ad4aa43269dac2dbe7a95e81d25f4c4a6f507f7ae9d65aa463b90438263905525f061de397fa2f9240edee2685c9fbcc0d0441dc721901582e564b384aa1245232dff12092a13d4442d51671fac9300a2d191cf833fa25c869ba14622fb087a8395a33adf38530198271986e3f6e17609a88c3a53f0a127186e77c60de23bac21a194c4a00b7d82b13083f32f4bcd01075493e4a67aea2beedc87420d91153aa10d33b17df8dfd6e061444b087283543fceb0fc167"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x36}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0xfffd, 0x1000, 0x3, 0x8001, 0x9, 0xfff9, 0x8001, 0x1, 0x10, 0xff7f, 0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xe0001, 0x0) read$rfkill(r6, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x78, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 05:04:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) rmdir(&(0x7f00000000c0)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) 05:04:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0xa, 0xa, 0x5, 0x0, 0x0, {0xc}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x83}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2597}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000040)) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000020000000210"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1022.937378][ T3686] usb 1-1: USB disconnect, device number 92 05:04:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) [ 1023.011854][ T3686] gtco 1-1:0.219: gtco driver disconnected 05:04:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) 05:04:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x30}, 0x3c) 05:04:54 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) 05:04:54 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) [ 1023.361580][ T3686] usb 1-1: new high-speed USB device number 93 using dummy_hcd 05:04:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x11c}, 0x3c) 05:04:54 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) 05:04:54 executing program 4: prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) vmsplice(r3, &(0x7f00000000c0), 0x3e, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 1023.611587][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1023.731666][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1023.742687][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.753982][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.764060][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1023.777185][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1023.783819][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1023.792834][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.801378][ T3686] usb 1-1: config 0 descriptor?? 05:04:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpgrp(r0) ptrace$peek(0xffffffffffffffff, r1, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:04:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x11e}, 0x3c) 05:04:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1024.283245][ T3686] elecom 0003:056E:00FF.009E: item fetching failed at offset 0/1 [ 1024.291239][ T3686] elecom: probe of 0003:056E:00FF.009E failed with error -22 [ 1024.529626][ T3686] usb 1-1: USB disconnect, device number 93 [ 1025.351450][ T3686] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1025.591437][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1025.711498][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1025.722465][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.733494][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.743431][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1025.756561][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1025.763186][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1025.772213][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.780779][ T3686] usb 1-1: config 0 descriptor?? 05:04:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x19, 0x0, 0x0) close(r2) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="83dba1038b0f60e1452c8392d46e081b000000000000a591f27019f0e72412afe26ed4023449dc70b311986bd4da2ce59d60c50bcc90a1ce7d8ce322adaee130d1f313316f7409ad6e85edea22a8564f83d69debe65871016aa9fff14123e38eaa9464422ece1941c99842059e0febb4e4108770b600b61e0509b9", 0x7b}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:04:57 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0xd, &(0x7f00000000c0)={0x9, 0x4000000092}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x180}, 0x3c) 05:04:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000100)="5920108fbcd51950920bad7e91b1b67aa91abffd14d98a5a3a10888fa4f08330817180a02e3d9a2e2ace6b8cbb99f141f75fbc2412cba634827535197e3be03147cb3cf428e13912379b862be6494cf844207caeec3d0967078f18713925902d4f8bb7619535cb52e8ba265299aac713864f8ab6977a691463f4a0d986859e28ddba84f7207fffdf5665a1b60d128ca1413b38e7eaec2abcb4218a4bf0cbae052c5b35d1b97e80ecca16d6e7be291ff5da0cac0ea5", 0xb5) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x6, 0x22, 0x7dd, 0x3, 0x80000001, 0x0, 0x2}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:57 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:04:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) close(r0) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x900) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f00000001c0)={0x5, 0x0, 0x1}) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c090) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="cf24c0493108d83d2439840a369d954fcc67967db75fe965ecfdc8dea8706a4a7795"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:04:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x2e0}, 0x3c) [ 1026.041473][ T3686] usbhid 1-1:0.0: can't add hid device: -71 [ 1026.047688][ T3686] usbhid: probe of 1-1:0.0 failed with error -71 [ 1026.055973][ T3686] usb 1-1: USB disconnect, device number 94 05:04:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x300}, 0x3c) 05:04:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x3fc}, 0x3c) [ 1026.481362][ T3686] usb 1-1: new high-speed USB device number 95 using dummy_hcd 05:04:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x500}, 0x3c) 05:04:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x600}, 0x3c) [ 1026.731365][ T3686] usb 1-1: Using ep0 maxpacket: 16 05:04:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x9, 0x100000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000003c0)=0x80) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet6(r4, &(0x7f00000000c0)="a8475e0f170f", 0x6, 0x20828, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x9}, 0x1c) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x3, 0x0, 0x0, 0x3, 0x800000000000000}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000280)=0x6, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r6 = open(&(0x7f0000000180)='./file0\x00', 0x100, 0x9) splice(r6, &(0x7f0000000200)=0x401, r5, &(0x7f0000000240)=0x4, 0x5, 0x2) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0x80, 0x7}) 05:04:58 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f00000001c0)={0x8000000008, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000001c80)={0x72f4, 0xd, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1740, 0x3, 0x0, 0x1, [{0x65c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x41, 0x6, 0x1, 0x0, "1b62beec1912a4cc1c47278139df5d54d7585cb03037aa107e8547188717880ea34df05523d6f82b83848ad7e314c06d28ad55cf6aea8f7aa1ebda3a6f"}, @NFTA_SET_ELEM_DATA={0x568, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "5f633c6782679cf193665c71258d7b6c7de413aa98132b9a0984d149ed58d8e79cf70b2ade91a27671378398cc70d23cf5716fa1af19e44e7e5734d4d72c571d9d1ba88068de16d8176a0823c0985f753b3454e1707597cb0d7001477a3f0002d053fcf8aeb44b3c48bbed6d5dc7d5c0d6191c64f3ec724b8fa14832c709dd03d5403875f08438f724cc7942eb1f67bc9fe76c0cf0887df98a46995737a8ea4ec8343f480e646922f65cef9db79f0f6bc8523ee51babd43c5cc8f39d99c1a1fa572ccd5fa84ff108f220"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x60, 0x1, "7b0de4c774f8408cbd3c9e7c6b5df4edc137586d9ccfdd79d594021808a83dd08be8ade4c9b9b2842ac3a08cb8123cfdb974cab7cf81c7acdb9ece878daca9321a6cf9a43007b3390779054249722b18248fbd12d252c64b6f11760e"}, @NFTA_DATA_VALUE={0xec, 0x1, "ba29747bb0b6f3722bd0bac9f7498de77f6e7b1e884f4ca65dfb76b27f0905c54c9952c796d76f80649fb3d0c49728d25737b58a07851a09ae20b7be49bfd60b56db8c9ac45da0d70d664ab4e8a32470c53aaac7f151dcc5e0cdf2d3f6d5628d88ab5a64fbfdf863ea29c7e5fe4a905bfde50100d4ab1838267fa8f285d67cdf21b5bba7aaeef7df1f5b12d97cb5629ab8a785275b0ae85039db2763c8e3e848a660a57a2fe09e4c38e48f743ca097ea631fccd6ca618a889c01b9d2e05b8ab2cabeca0ef56bf44212e72bb34051fc26f132b612a60a5d12609798e2f1cd9f2fe5013b684e377e17"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xef, 0x1, "cada0a2ffca6271bf6135faae54caa6244b48b59e6f62b2abcf5efb7f5437ecdb378ac95ca303a5ce97b50250c7c7617daa56c7b5154eee1848ea0b57255a5d729c149cf20f624b0f87626edd7a8968dc4afd23dd0969d75e4d16d48ef9f42a593c24d0d4767212a487f9161488e320bd8efa1a99ee9519ef8febd9ef3ba16f6268d4d3b984e1e30543b306461438704bb354e714107768c10364cd6d5b598b676e2d42800bf91296e563fc115ba5dbb6d8729064fd5a2035fbc0e27b139e2d51f2bcf4021af4892ba02e9756564723f68ce869ee1199a115c54a453a6446cde99fd53f21a9c7540d0a5d3"}, @NFTA_DATA_VALUE={0xf4, 0x1, "f3566040673784c6373085d32d6690bd8bd7d0fb2f5f491a919c1d2fa1827edfb79b41876a43f7f86fe9f4adfd55539f153f7407cabfe5dd4020b25782fb9109b032205f81ffbc239556eef3940a23c10dbfd874f685f595bd9519bab59f170341e5d98d32c9777743e63863e50adaa386cabaf7fa0b18259ac5e073c05a0b9ddd50348cb5e340b297cb37be4304e58be1f466f6383c1835cf6d3e03926de7babdb62093d003a938d955391282fb454e7b0b5ac71d9311506ed724e43b004c9e1a0744ed3a69591bc03305a1e2ad30b143eab68ffa3007ff5cb57212da01c8d36abc2a3e07b04966661b219ce50d65c4"}, @NFTA_DATA_VALUE={0xd9, 0x1, "42bc4b4c84730256455b4f60eeabc1229d9cda8e23a71a36a4a3d3db9e07a00db1b3a6d57dbdb8bcdbcc5d22c1331bfc36137b1b24b9305a555e3b424e0c463451ec64642b0795280993f11166663a80d28be89d3312ee1ade82d750620661bc670a5b146e82328c397e842527c3c5d08ad4764eba30dba069f10d71e180b44dbf8bd7eecb840e474f8e2fe0b0b02224c70d1551bb23f28d0d8349721a65c612cdbc02bdd8b4355bdf8af75d46bbe419c0a6d584e093a86a97a8048dd617b881fb205ec62ce1a90fbff420b8dcf0649278e2beb6c6"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "93d4ee862053ec88a0e0992805bcfba82c28d1275620a654785d38048496ca7c6523e9c89a13af8c6c3623e5780822213a0cb8cd282f7760ad3cea90f4db9ca3de05d6a42cccda2b74aaa46c6dc2cd86b7a08ddc069b9e44707cadb638fcf181892c70c223e4da2368a65791a691b70a707373c206e7e32b03dc7a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x10cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "bcf497598d84f2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x302c, 0x3, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "4017f57d556981332e9a6a3d25065838ee4924a03480e2ba35f88c0575a61f9aa98f47bd1684492b59a548c5374b22bfeb4d30de5c4b965de051ef6186e8a10ef4cf475e2105ef3c453bd96cad20455210d42f043a2488196704bd9ea38a6b411ae43d5f89cf444136f92d20ee65e31c1556d6efc52686d13192bf94dbbda0adada4bded6a45175c6cccd1b000f4934408ef11ab79fd2a46003ccaa8ec2a6c3dd8fb3487d822"}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x51, 0x1, "284da65ab80a752d6efd57df75751cc7f6b2991aeec40bc6197bc62c20c2f5333bb54ab9256971d43fa480aadc7b105bf3f3ab4a09065935615e67a72517c0e9dfae3aa4c456679ff5eee6fd10"}, @NFTA_DATA_VALUE={0x8, 0x1, "16280faa"}, @NFTA_DATA_VALUE={0xf, 0x1, "3cdcdd15f6a9af9900059b"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x1284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1280, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "27ab51843b6ad9d0f5654a5595013ce5d5267ae648c8edef8029fa4066c5"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "5065e2b13a3e436314b2c35ed84e2a36b84ba41db7bd901787dbd6006fa9989b5651d89a24e3ab529b867d0b27356b1b3f2928d40ea5cedefc8696e140a2c8bedd5d92cdc18de2c350badf0d817282dcfcdc460c36a7a358af799cb267fce0001e26ebcb38d0aa5757db8064613f2f7c8bf284dcc4e4991f50d12fe8d7fc9d2df34da0fdda94d5724117dd37892c5476d5a7428e60ddf5136b3fa1de527a6b6338e1047db891b1f19210151cbc98ad7ca78c0f42ab3a92e22bd5e869c8040a7edb2c1375f06b35"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x6dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "4133369940d34977d19c60366908e3a4feec0d3c8a6decd6f36f83caf39109d03d06619ce458176b1fbfdb34de8b375bb3b8b739813ea905eeac062c29b95f022bd13827150d86ecb624244be19a37fb777ca71732ac874e265b10ceb12c2295d12ab61ac22437"}]}, @NFTA_SET_ELEM_DATA={0x1cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "f0429ed591a161bb8c8ad329d96ad160784914c4ddda64ac3c9319859395328b6122ea898c6d02d1a47f0894cf3f674e69dcd841d3c78929ece803e0c1d5e2"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "83a3ced7b362e246ffa9ab6d4ecf7d5c2225a992b9fd1472a10d6f2f2924e65dee4a72f8431833a543d86fa0c9aa36841a155b7e2a7bf83572f6882bff1c43916fc16f0657d4e8a23fac16f4c9b18c9dc1c04e871592c538ac041aa5e234b93cd4cd120e7bc8849f24f60da512a1f05c1c8cf18ed6f8e1085661291241aa38d4b24a4c726700138d1660522ab5b9ced1218d54e1c65693fa1e62ecd95a59cfa74d26bd2a0bd9b27c254ea32923a353493213ac1f9be94696037fdd20d523078915f78e686801ee5b9a3c0a3d4efefe7cd9373f6554c959042c30e7"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY={0x268, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "d82f36352d1c9782e3ac2194f66093889ad35be6e1fbb7af60f169a4f90a7b521d132c0006e47f0e9fbbc4d2b1d3a8c59fdcb143638430235be53e576b23865c9503c1ea966ee240c7893eafe5a87122e29a6e8765729644355341b162c5736e6ddf4173d85965ff30ef7be4356b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xba, 0x1, "3b18536d490f3f9c5ac673bba3b180e424bd97514dfb3ea40bc1d5f9e41c7c4b57db6c9c0eaeb3baa40303aaf460a7ac3310d2fc59dcdb17ad43b25bae0f54bfd9c866093e5795a2356e90fc782abef827716f92c09f2ddefd2a7b879d3c65d1843a8c944dc6686a4f8a99d7ef3499e32bdbb3acd9fd72450989194970b7a7e694a8093bfe2a873210575fbbbd3dcc6fe2337d2e50f6403411a071beb74b9df8a84a7fc84cf56f887deffe834ad588ed73a6dae1a335"}]}, @NFTA_SET_ELEM_USERDATA={0x5c, 0x6, 0x1, 0x0, "f3e9d9a661ff18005bdf3b7738f5157db3b50f50b5adf2a14f9b021dfaa71d657fd2f8baf53a378f5c77010e7c422d1c46c26c01da207b9d49850749bb01c9ca85f2383affe47fb9e410f033341fad7f07285efbeedbd074"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe2}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "52e8c19a13891dd322df21601e8d24befd9f9261dc43e6eaca8774062bb9f52c9f68f8a130408f9fdd8f04e29779f9bc2b8582d3acc9e1088e62c267389f22e03ddf150e07901033b721208618f86a0e514a63fd80d6b91f8828a38271d20a35730e60c48c0701f912d004e2c4b1c7393fef3c4bd07a09e5c1580279a3c4ddf2cd59a71dc222282d2f0293ec76312ed2652696e230d9556c65f3c7429ffc07ef9fd0149e2557d10914b7a163a65dc5d87f56d3df5d1e3fce29ca41645852af50ca806fff41513763"}, @NFTA_SET_ELEM_USERDATA={0xec, 0x6, 0x1, 0x0, "9813925b0cb9d2742c049a8471840158032266355224011dd224c672799cc3b4bb73cf06be09b007ad30b5c76f3cdc733372abbae33aa063ff0ab8c607ca884e30e7e2f949bf094cc3e22907cdf72390ec8629d9448e8471665c187af320e82a5454e3db814b0e7950cf3b3855779d3b2b79a150431a24fac41fad992398601dbc9f2c94ba82ab163ec4ee5b2424310d5811ba845b36fadab29536366b55dd1fe15ef54dd7c6cecb5e979c483f94df3ddb85316761acdd911a36c3be827e00410143c4529334b210e891987e8d2cc36665c8b69002498e09d7c7b26e7de08c10b3aed634781dda24"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf83}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x76, 0x6, 0x1, 0x0, "caeec78e47a7ecff7b4058a2bd20000502e79b76aacef2f9087f3c0e905b15500ff9850136d280a5adf0d4b9ca382685150ebe5dfa4f8050ca8d37839198f17eb29e30db9a8f6730c81547cb7b4d2ea4654b992ac8602baf0e17b2255ab60c1b127e8e69f01f41286b275508d8d35c0b397c"}]}, {0x14f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "bff9e26f90b7bb98b8b7a4165ed4e60e88ed2fce0cc8ea61a40fbc43b155cb55b04de63779e0c47d1cab3d970fd34c80c7edee07075d6a3c26a02ad60ed8f9"}, @NFTA_DATA_VALUE={0x1004, 0x1, "be9aa8988625bb1d23223e22d9609bc4c244a0b3b905a6252e74b6121a8e821f482960ef56f1efb3974626bd37f80525db1d95294007d3b2e69dda8285ad5acb1893d6d805b40e77ff016ba6f1908d11f0bb76a97fecf2718774234796e833c1f0e310c1b93ca87b43fe302c2aef3550570a4a892109544d9a914a8ff964732dfe2c2319c1b423dfe6d45b18607df4ef673f1d1ba9051ffee0de0ea83b5e38bfc62f62e59c330f6fb647c1ec5f40149c608db791bac42fdc117ba7d91a15ea84e71bff8cf1abb3c4720c3bf9a23383d290c1745fbf822d648fbcc907d2ad391bcfab13687106e0d39edcf52ff5db6ba8e03ddcf810cc25c163272f5b4939fd81572da6747c17c71139529b574fcf5f083ade4742bc1e86d8d9c24ed3dd5b0bb2028632fcd7dd36b37d3f2f3b6e50885dd2dd60965babcf0e94f53b7494fdc6d08373b9dd68d5e6108e6ccf41e4318bebe54e57945b83b54f7842c5bd3925429ef98253f437abaf58d64f2bb34adf763d98b7957e3f9ac8b82ff2d464a448c959d3b1466f972228b8e82ddaac184a7321437f2f5e8474d7327d331dcee34f4582370e2b1d97e95ec1bc00de14ab22f9ae6a94215ced1b701e00125d11fb58c615d2320d5d3faa99e8a64aa12cef29d4487e369b4f577fe337550afdb9ac41645f6d2029a527d5c9f8dfdceb6d6d1d4663e32fd6c37689b9052e54e910417469d599007e056338212d9a36843b95c572e8cb1caf154ccc5661a17811943abe6016c4d297fee7d27c5bbfe74b3c02ac67d49c632a42b81a8e8c7ed3f07c22a5c9682150fa0bd3f2bba25b15bd29629c05243ac0995a073fe3bf0a9578837cf2a74a858ee7ddba16a1d872b7659f1ed5e905e29a350cf9ddd1decc8d624542ccfebf66f8a6eb702e4d5fff56af0b5da96da57768da87766ad40f55c3b05f5a72158bb51958341392ecd734e8d90e5e7060353eadb8ab09895ae636df4875fcdee3e9917a55da989597b41c303e880131a91d201cbb2f6693f8347af0d99b916257d374a24f5d047a5ec90bb1225e37a031cc9f8b3cd2ab46d4a9d6ee8527cba5dc0c92461573f686f86f4def4148515510ca63509139c9931432a842109f507f4a5a03cba9a1c1ff91c86ddc71b4c8be91f0d83831568014360c1788ef1de93bc7367fb0cb9c4899ee2c697403e6578d4ea9a6fe480bd7f9b41eca8b710662601d5d52e1351671cf501c11a5ecc752dbfae129cdd1a3fb40ef7b9bc08a43fa2a87eb8b15960ce930914f1efbc9d095ca29d19dc68f02973f3de2553aca4409247af1183145435c5d7a627c24059491e55efada0caeb3b8c8e26519faa61334a10e5ab891a2f056b9e2313662939255731b7ca027f99574604ec6a7f094e2d1ca8a7ccf678c53528f4ce062549df2e505849a52a301d3d2dcaddbfc297f05ad7d2368dbcaa8d3bc090890aab503304ac45447a0b3a2028f67a4f981aa013ca0176be3fd71add1e4637bba7d4a6fffc824c8c8909e1b0020a436e7d36b961df52c1dff1101dd582c4a0c16e803f55c3a2f9faa6656734225029e1c815284455ac163e7a92503ac43f9274e554ec606ccd548e97901f681e2c831f19423392786b2f1beb3c0cbb876789bae63e6fc8def61ff234fb6574f2778bc10230e77eb765e334b2197d262f552e198f813642de00e48b5b2b28b4d823f1c84f8f4a881863830e389c1e968c95aa0541c7f99c4e81da6f1f4ed9e9cce2897aebe99a7d55f54338275471369c3c2c04d1c56fcf28c3e7002e4a9ee02be269fa1a412b4f764fa9139b3aad81466beb3e1c4d638de760db261159375b25c16f03f70f22b000f2dade6c1f68e3a98261bc129c033026d49358bffb8a01465dc98f5ab56e500621ff73c6be0fb1f7b7e6e4298f5cacdbe26f8bc8a4dd4899f00f3e3056d2ac102173c31f07bc96ac81e72eb0cc29ad69a6b8cc6373b5ecd3f572cd09166ed1686162f4bb423a3b88074919fce06d701e517a3c9f7e5164ccdac84b3365203e5c8b6987fd41b53a0e816a5258426f5cf79c408d94a69a2aa5ca971ab246919c78dfe6b9a96e7c8fd1dd35c2e2ae5bbfb5d801959b05a65e5a9b9d53c15a6c293ef6f0932068bfa88cc5f77b5aa88693c9f8925d0480449aba801a41688e79b0516063089332aed4a5f39891bc6a9a645ddc3f56b45625e91dd4923ccdb6ae96c7f85676af3b884cc6b3e4826a1038480742aaa4e0eba8c029be7edc2b2bea204cdf8c504f38c0cf2a4b1bdfa4a4948ca06e6b94ae06cb4cefb285a6b6b18fb774ae18ed38733209092a8919e99089e7486565edde4927e58d16d17f4960dff3aed064e8937e50d4231bb12a91a0065b63b4edfc0eacf23c35cb75c650a6424cd2d0217b5cbd53d4397dac26db72caf3d156860ffd5475d78a287332777096b4f91dcacb2ff4e16e5a383f8c7faea70e59cd5e7e59c8c68abc64ec5f151630c41ae4e3fcd197c13db5d446738221133b1f5ee9358e85dda2200896f9ac42273e09bd3d546671a673efe8a9a9d29ed147b145fbce23cbe78708a7bbe82106f2a2d7d0da67f2d2fcb28eb7e9d404c742fd28925765c58915452f403ed07bf49d9e4d4a7ad1f9521234fc55b340a19aeb02f423dfaa9aee18ecb194353610cff40adc5971f6df5b8811a8cae091e41a4f67185fd42a467fde67da783e80190c409ada2343c1fd473cd167fed2f41b4c90f6d8423924e42d8fa721fc9b1bd00ff00c7d5338b4aa0e6ef9e42cafaf45ad432e2f326bfa2029f5edd448abdc8dbe1edb1545299517a9fb2269715723fea12df06ba1da3e4ee5d1b563dd053892de800f7fccc219c083f44e92058ed93f72865f159521836b230c9e088e2f89d8b26f7fc688e6d67733bfdc338a6aff3c0b9f2eda5a4ac1fb00ac4c3e86f35be0642b4a1797ffa52c905bb9543e6a9e867cb6a87ad976657d9921474e1c0bab2e60e081e4193587de7521921b16cb8988f2985796df978f523dfcdcc516a71bdf1b4b4c73673c72dd49b2bed04a35f1a0ab3451e70bb0365d053495e63b07be5882b1075f7ed68355cebca51bcefa98a0515447dd84d824ada607568fd6cb0e1ff57cddc664a2785da4eca9f24dcc3fc0648ca07ae8f7d6cb754b4ebc79c36660d564c7dc382f947d62330f186d52957d079567308b2307ee3f9f88494af09094cea4dcd0c09a6dacafba04d114f7a6e89929e3c46dc8c0b6c2c03a1a17cbdf8f81bf593f47107e40bf07360ba4b4fafc93a630d64c88d43afd1b4a04a6bcd27fc2c0983ca5156ab6dc6f06847e13730a877285177616597df32b182e408d8fa4c730d18d6ed647fd4ed6e71b848f9dcc41ac0fe0cd5ec41dac2741aab21067dbb0309214c4240df108b1dcb56eb079aaa0530c826f25603ec4c0bb569c3256f8935e0c32b173a30949b7c34dc01f1c85ab7fd9a9b6d49c1c7b13ebe55aaf668d3dffa1925856c186cfeb03bc33276c990b086101a61f4d566681ae4e2783dd0fb47f6909fcefd7224386e419ad1bb770a03c7d17b06276144bca1d7746ed6b91bda27f9a744d204f1b00f7771c3f0bdd25b58d1f09e57e8b2c46ec016c20d7a6e8a5a746fd1262cf25ccb466c9b7117cd2bfee9b9b31309846aceb7eb78132a91b7ecb85ffe1a08e261f84cb5bdabb839dc32c4a16d354509891d2d399b6b6418a96e251d99fe6ed6231bd1dad19cd023b264676aef2416af9dcdf654b1e68403bc16288c793c607cd886adc05a14c737adf0afc5f962f0ead54f063b8ca90ddd5ea7aa4821441f08a8e14f9c12ac8c3bf3bc8e5a926e14c3a80f5df597b3d7d663d63f2df3ea3113e0d2f02b0e428692595867139d7b90f73aca01a535f0677e4577bd84e18ec87192551e87429348834065664ba233cdc66e97d2f116b643a31a78bebfe43b834c0e0e5dc71df9dccf6057ff462a8fad6567190de321a5f014a038be1c182431377d63939cdabe13c238920904ed3ede81a64792e3a2017e6d1aa9c16bb3fae92db45b548c14cfe4a4e72af46b907cfd01dae58cfcbfc7f7a287a93fcd4747ff41aad62e7db309f5f7b6e5b401aaa56a9adac5bd4d97ca95ec194559d872d3300623fe8841a360afbe67c97bf119bcec313179d0188e8211f34031ba001ca5cfb7db3e96e772bc518405af1e0baeb82452b92ac558740df800490c937bbe114301311ac8a6ee7378f29761e2141934c5f487fb7e11318bfd899c7aa5aa547d8b1c150521ecacd09a6dae0d9eafdae57b147c47bfe2acb21c7d6304917d86d3c86842a374d3e2de11fba1b5142c09a502358bcd6308be86ccbbc9797d85b342fcab16a2dc405aeb36a09bb1531f10ee8a995161460cdaaaba5bb9c931d7015f6217f0e7e2639e1a0b8135ec25c792143fa6ce8ccfc363ceebbecbe1d2383e956eae11525750ec7c9953fa599ade242ffac4af6aecf18a2e7780512b558628d797c665203158bfaf98c1ea02ff0ceb7b579ad5daea0154cef166aa1f29790b229f4e297e2f8ec446bcee2605d2273661ae58d509773152d6d4faf32bcdb7091c8f476e8b0497f44431ab65b077829fd5c1e0cf286e798c72773409bfed5c517ab19e7a34bbd826f9c2ab7a4b3f9e0c4468606b1b41ad95baadf9145856bff4f9ed23f6cbe4d28e39ed103af25e23ec9a9770779f980b87bab474d1e0e308173ab9e3087bf8714a44182514318d1a004439367617471230c2697b18583534aed85f1cef70e8889f232dfbc01f15d40ace26d1aec2d9f81ae2be26faf4ab0a0316614db42c53edbc409e4b16cb27fcc8ebfad5c71f3678f6dd913a8cb875b202556777274307c6af9ef1b0125b2f42c406583d0ef803d4593d1db26bab6eb307d5a90cf52967fed13873d8919e8bb9f609237a34b67aee55bbe8439766d2196f35a2592e03862b3a47ce8be0a72c775c74b6690d2bd99c628a304af1be88e955d0dce5df586912d93b31defe84b007193dabe3184b4d4a5a38ed03dc344c5c44dbfc439e0102b46ae73eb3a933640477184ca74ebb2359df8739361ccd6d1d352f9bc98a4045877f00ac4cd6b4f5fc3ddd2f40de868c2afc48cdb59fb9dbe1988b604e3c9804f3e2cb2f1789b6080f192aeddc64ae52953abba091ff519d9ba8d33768742296bcd62cdd5fdb0f21b4b0064bec1a1834127388fc67c59350db3ec4971077a45f90632c7d2cebdfd885a08defb8d86e4fe2716af9aa79443230a2271e4825f15ba2ee65bf539e907301c7467b7798c4eccbcdbcf73eb963d7c94e64b735cc8b07676bef0fe39c3145f74969f952c41bf41059b2c81fb6352d544ef43b1c8a3e83984bfa4c1b4df0cb7465ad6ab1bfc959bee1caa2dcfd27febc29b88bd56248da119017261408ae5c82bef334d14c1633558b3fe232de76eb6d200660ba325353189d11329fe794500df2f7106af1f9b9d2faf634b60bc4104676ef7ba9759a5eb323bff44700df58e82600eccb697d4599ad90c44470df75fc09074de3a84980e0ce28cbdb835d758a353f43af080d2e1e778ba0af40be1738ee69e9546713897f568cae109952ae501f78fb0d28bfb79053cda895852113875effa9de28c1f7ee059f65bac98f183dffc8f8cc0bffe97684ac8bba47499b7718299430a3ecb1a90b6b080d09e160a0b549397f540204fd44fd2a9b9c11e4474cb0e02195cbe2a4af4a62da7be578f25ba6314a148e12ddd568acb7c7bca4d34a0eb95fda27c82bf754a3337b89e1f4c54d32bf8cdc362fcd795abe7adac8cbb8604c"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "9ecca26067085fe8a8f17aaabad109ceef4e95ad1e24d7776435bb54151eaac8daf43d86c824414eca753446dc7fc637a52cb3995c83e4314c8d302db14bdc0e8d7b5631a9a631640c672ac11036316defa2bbc0a2610b67c968fe4b7d6415ae48d8fe253207d3cda059bc9f654c59b124b4936729c229167a749784d53c69b990e4ad530fa8f4dc1ead161b1979ef573b7030014395bb4a483abe6b"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "4b9344a21fdd5cf6efbfd11135b1b3107ecae39b20657981f8075f3c3c1df4faac6aa43aaff0e9aa1428e3e35347809bb91c19ec5eb008d15a3978f6e210f834dccfd575d01124ca7fd8cffa90f9f58fa100c2bcef631e22e4634105f37510e1eff1e540719aa7467df8ff6da1ca3cfac8a8208fa353dae33b747c324391c7206239a76145bc6c422e235d5a46c84b30b4ebc6612a20c75411c1893935ff2f84570e5c255a7581b5c281f1600154e53a7b1dc0334c43114c25e1a1ecb467b87dc2d25755b1e0186c204faadc17605a8270db45e634d158af378efbf5847e1b927a87d2b2f27462be6b37ea16e31246fa5625e6b4adcf4f0394e3b1d794aef6"}, @NFTA_SET_ELEM_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5f, 0x1, "c28147114101e4845b3b2e3d4315d0841113ffa3ef2bcf9fa547a4875bdc5cca62e36e5f15b925f82dd2aa24dd64e3f6eddea6880ecebd05b5fa9edc3c7dbafe56d33b2ebb7786159f079e00551625bde346f39271078de88f6ac0"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "8910cadf5724ba7681e136b60b5f2f9271ff582079f32fe2e15495865bde9700ae2475a1691903a43c67bcad41608da80dd0b97c5923d96e2596f8fb4c1580369c12e68916b936196b922f2f3baa5d3f023efca305d4bd9cf5fc975955d344218b95b7ba4bc95ff36e9f58dc5b2bcf632d89b47e3ad95f5ea17d8c1335d2c5a379b9c08b0f5fa6f0eb252415f3775ecc23b4162fffd35f7bd7ae6c87bac6141b1855b51f804c21bf5f7758d9390eeddb95457e8fc48e3b1eff8d0ee741d15e8f6091195679f878d12e99ddf124bc19741b70c099"}, @NFTA_DATA_VALUE={0x1b, 0x1, "fd81114d4b028db8bcc3a496d20cc15e64501a7219f518"}, @NFTA_DATA_VALUE={0x94, 0x1, "72a26afba2159fc68abf3539e05dd500db22a6aacd766e05ea7da99f6e323208f6ebfe137a48d27f91cc19619edce5355d063fafdc4ea70e4cec74859fc2316e1465c6a1f1ac70e5e4b669f513f2dad89bef16f7f94f3250fb535d4633cc28055cfa0c7fe496f4271f115a93ae841d41deec9fd8aeb9af55b5fdd07cec8ca37897826995dd5b76bd49eb003ca7f39d98"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xdf3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b48, 0x3, 0x0, 0x1, [{0x268, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "1c7d554196e1d25c158d5babee7436775366e5bf2d773d7cd887beb945d065bd444d8ed806f896b46966be48ae1bdab5d6c183e74b306d5bbeb8d85be5b948a7fd8aff68906e9062d8bfacd2a569cec4c7c6602d66a2bfab3388bcd30d5071970a146531d5473e35de252d23cd50037fd81bc129047207d90c1e3c9d57879e873d31c38a43c687991f697a0da1b3ff22328125348c51b004d97272e6058f47b4ff3e17d6"}]}, @NFTA_SET_ELEM_USERDATA={0xcf, 0x6, 0x1, 0x0, "cc0cbd628e87e085a6b16a2faee984279179cecd03cd38632029a4dc9f37b7ecdc98659b0b250bb95ed929ac2263291ec9edb3c9ec43f046be718553f183133d726324201c0d7dc31a4c53a10f341b1b58119505ae40bb475d983b910c9180d5fb3e205288050f07abfceab1cbacdcf7103395eeac3f1fce1a52d3c15616834880ef654a5334d0a96588f64682bd374127ed094fb4b2a7a464a588cb7f52b71e2f9a97bffb0b10b6dc701d1b9583506978768f222c177b9f8097d80ad61367409dc3130105b67ad19cd2fe"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "0b5dc35853b2800756f2d7100661e15d74db9b9e9d795e12341774a3ad7ba030c34722cdd5340fb76f70a467fcd35988d713d5a205c775e1b6ac2ded73db4de8632d8b403afe6f4dbbd42dba840473badebb0f14d6fa290eefcc97606f1d5ec99e6703085c86909976b0d53df9b0b38c33f9903714b30f7d8e7b7e93e632026704a5e8fb3ccf4324b07c449ab3eb086e1fc7a5c267938f2015d53c3ac7fc84c72f2c26e48fd89aba2988ca"}]}, {0x32c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x2f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "caf608eb44f2ddfc705fc9905838a55a086190ddbc7367503b652a61b5a7d38301e7a86a346805651b3d5b07722918077b1385b93c79ed2631125f53adc0c19cd7ccc20ec4169a46d22535311f85880badc1e0d1050a8658acfb623285bf7323401795838c491aafae240413393d4ab42aa59ed72b2ab4255fa4787cef6ed450ed062aa746306c13ed496c0f147e144c5fae3435078786ce220004266443bc93a087389412d9abfa66c39c94a420f44c61eaff3acb25cf8cd7db07fb108d14aa35be1114277ea1cf6f89f6b93fdfc2f003b43f750dee9dac38805badf89bebef439b6c1108a4c5d6eee7d36d5ac76a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "66f90f0fa7e87cb0c2dba45240d10d6827aed2636757650a8a4728c2d03d4898afa978efd0369278c99898e585d73f320d627ddddc11f6f933c81ad25dced9e5a0f7279f0b99dbda89fe6462e8d85b51b30d8d7778b30949c716ca2d499b836c732fad39ecea1156067a726d2975bdc031623e6554e143d58957819fd5a2fba76a39a01fda0a6fd3fde8fc91bb8ee30b10ea394bc4cad9a8797e1c7d8c8d7579c4dab3c188f75170b6b90707745c150047c7ef28318c401ed1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x2468, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x63, 0x1, "0943aa18b360b9ad14ba57e4f9486b001aa77c10db4aa93ee9c228d98cb8e680afe4d87f0f1bf66c9b805f111e884414058904984faa46dd69171fa414bd47c0dba4ec410d38a61ca7081c2e1d1835d859a8707e56120cfbd5df181a95b00c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x122c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "de8a9850a617aaf36c77924a0b7b7920eb2d6210be012bdd1324d3510d3a467443883a22a6ddf2725749ae53147c0dd8f6919fa91c5fbcf0d82cc5348dbb5c2048bc89d34bf2e952acef57f8fda056def975487e5927a4f58b62c801b0fe8ecfe31e5a0904ab1fe44962933fd8ebf1412fd1c96298436948b8feae23136168ec9d3182bcf4c663428d38234eafbf9813e05bb5aa5054c37333df03af213c0562cf00acb7709464c25e838aff932bb829c89272dfa0297653e35589fa896223730638d85ad1125c"}, @NFTA_DATA_VALUE={0x70, 0x1, "1ed48867a8cb0c0a3043e3cdeff41c227194361e88a8f3c70e9126ad2931818222823745648ee373f2f76296bb15783f8f5df155fa2812f1e7c08bce2d60747dc3a3922c907e5e46c63ed32308caf73b787b85ee08bf3c4ce3a98d3ea9f77a2db8f3bdb799d1aa24a271f442"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x37, 0x1, "adca4f4399dbcc0874b7351c947c15142c12cbffc60d657ff8d689d2e32098ce261b02f2c013f4b6db22f1dab3161a0b76e269"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xe1, 0x6, 0x1, 0x0, "3a11421e0d824ca11d9cc69c38c84e93a0bb4991bbc41d03d80eb37fc0285490a7d575647e3faf2359acc61d833637cd55b559d2b355890e06b1bdc472114b3b8f8a8e45b2167531231e505c7644192d0276906f7e5150f0a46a474e84c1cfe2e65dc2bcc2a995c0444f88f11dfcbe51620897fc99cf3a8f3fe25e53ed633d5d795b96d4a16003237ab79a050f89a72d3d9c21cdc9f8007324dd0d51ba59d05c60b373ccf7dbafabf7a268c38483d337eac5f2c33ea173146a4530c53917f7cf54ea889679bdebe03eaa734dc52e9db7baadac55362bedaa25c575fa69"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x39c}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "5abffca4f17976e14d87c7783f106dcc8e1d2d11fb5b7804540b78cdab9333691b874467cdc613e797d1804e369f291b75646b33c6356160e157d3b41d81b477f626b9f6eee45c237400252be5701d9bd218263b9a20dd0ec3bb6d04ea61"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x72f4}, 0x1, 0x0, 0x0, 0x20000891}, 0x4000051) [ 1026.881426][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1026.897820][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 05:04:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x700}, 0x3c) 05:04:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0xfffffffffffffffd) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:04:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1026.986239][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.006110][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1027.078368][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1027.092221][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1027.108009][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.118497][ T3686] usb 1-1: config 0 descriptor?? 05:04:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x2, 0x7fff, 0x2}}, 0x28) write(r3, &(0x7f00000000c0)="81132a0f19e6dcdb1b42ba8e78d54a60395426e995eae73d9b00"/40, 0x28) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000010601040000000000000000020000070500010007000000050001000700000005000100070000000500010007000000ffbb7b649a2d7e7ac858a313f1ef8dd82d33e1e70f9189b92f8e7908ce813eae2c66e0c33d5a6810d9070354c0c51993b9e350b14cee9c072680519b083fc84da4f646b06f59238655e17509bd34eeb460afe5aaf6c37e97de5e7dd451ea92f6abada9bbf59656dbf3d57ad859c5b02912f266e651d5cf6fb98ff5af6be205bfa36464b601f7df6d3d51543364d24aa3829fea4b88fa712ac9e082ec4b09f498"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 1027.851329][ T3686] usbhid 1-1:0.0: can't add hid device: -71 [ 1027.857317][ T3686] usbhid: probe of 1-1:0.0 failed with error -71 [ 1027.864870][ T3686] usb 1-1: USB disconnect, device number 95 [ 1028.611252][T22399] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1028.851194][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 1028.971253][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1028.982266][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.993317][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.003232][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1029.016359][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1029.022984][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1029.032090][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.040655][T22399] usb 1-1: config 0 descriptor?? 05:05:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) exit_group(0x3) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:05:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x900}, 0x3c) 05:05:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) write(r1, &(0x7f00000000c0)="599ec4db993bc1c9e9717bd1bb2db87b505d9705e9bafd68809b50b1c9f479e5743fa25faf7be53fbf05c48fdfa6a2c6dd08d6efe07a31939e9b53e52b31c9f380b761c0f4e38183a2540f7bf13bb8c01ecdbf3a31b516f5d35c80c45e17e9a51234004996d59147815fd0a6753b533e2a49b90ca93d9ffc74dd570d06352654ede988959bd36817531d64e12ba12e4055848d6084d8efa6f53d5008e740986a1cbe7a82ebe13854b96ea16861c602cbbb6811ab34860aa62545dbe5e2d394c4ca8e9739ab21", 0xc6) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000200)={0x2, 0x0, 0x1d, 0xf, 0x187, &(0x7f0000000300)="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"}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x80000000, 0x20000000000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:05:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r2, 0x0) 05:05:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x3) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)={0x0, 0xa, [], [@hao={0xc9, 0x10, @local}, @generic={0x1f, 0x12, "259f56b0e1c68fedd3721f287d82d6ae0f15"}, @ra={0x5, 0x2, 0xa}, @pad1, @pad1, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x60) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 1029.191259][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 1029.197288][T22399] usbhid: probe of 1-1:0.0 failed with error -71 05:05:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xa00}, 0x3c) 05:05:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0), 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) ptrace$cont(0x9, r0, 0x101, 0xff) [ 1029.252520][T22399] usb 1-1: USB disconnect, device number 96 05:05:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xb00}, 0x3c) 05:05:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000005140)=[{{&(0x7f00000000c0)=@l2tp6, 0x80, &(0x7f0000001880)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/205, 0xcd}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000001440)=""/161, 0xa1}, {&(0x7f0000001500)=""/104, 0x68}, {&(0x7f0000001580)=""/228, 0xe4}, {&(0x7f0000001680)=""/205, 0xcd}, {&(0x7f0000001780)=""/218, 0xda}], 0x9, &(0x7f0000001940)=""/108, 0x6c}, 0xdf}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/219, 0xdb}, {&(0x7f0000001bc0)=""/233, 0xe9}], 0x4, &(0x7f0000001cc0)=""/71, 0x47}, 0x100}, {{&(0x7f0000001d40)=@xdp, 0x80, &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=""/36, 0x24}, 0xfff}, {{&(0x7f0000001e80)=@ipx, 0x80, &(0x7f0000002180)=[{&(0x7f0000001dc0)=""/50, 0x32}, {&(0x7f0000001f40)=""/95, 0x5f}, {&(0x7f0000001fc0)=""/125, 0x7d}, {&(0x7f0000002040)=""/93, 0x5d}, {&(0x7f00000020c0)=""/165, 0xa5}], 0x5, &(0x7f0000002200)=""/66, 0x42}, 0x71a}, {{&(0x7f0000002280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002300)=""/47, 0x2f}, {&(0x7f0000002340)=""/169, 0xa9}, {&(0x7f0000002400)=""/253, 0xfd}, {&(0x7f0000002500)=""/209, 0xd1}, {&(0x7f0000002600)}, {&(0x7f0000002640)=""/222, 0xde}, {&(0x7f0000002740)=""/60, 0x3c}, {&(0x7f0000002780)=""/253, 0xfd}, {&(0x7f0000005340)=""/83, 0x53}], 0x9, &(0x7f00000029c0)=""/100, 0x64}, 0x8}, {{&(0x7f0000002a40)=@x25={0x9, @remote}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002ac0)=""/31, 0x1f}], 0x1, &(0x7f0000002b40)=""/219, 0xdb}, 0x9}, {{&(0x7f0000002c40)=@ethernet, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002cc0)=""/122, 0x7a}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x2, &(0x7f0000003d80)=""/22, 0x16}, 0x1}, {{&(0x7f0000003dc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/5, 0x5}, {&(0x7f0000001e00)=""/62, 0x3e}, {&(0x7f0000003ec0)=""/248, 0xf8}, {&(0x7f0000003fc0)=""/10, 0xa}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/70, 0x46}], 0x6, &(0x7f0000005100)=""/58, 0x3a}, 0x8}], 0x8, 0x40010100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f00000028c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002880)={&(0x7f0000002600)={0x34, 0x3e9, 0x10, 0x70bd28, 0x25dfdbfe, {0x33, 0x0, 0x0, r5, 0xfff, 0x3ff}}, 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x40010) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') socket$nl_route(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:05:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xc00}, 0x3c) [ 1029.681129][T22399] usb 1-1: new high-speed USB device number 97 using dummy_hcd 05:05:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xd00}, 0x3c) 05:05:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xe00}, 0x3c) 05:05:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1029.921107][T22399] usb 1-1: Using ep0 maxpacket: 16 05:05:01 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x9c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000ac0)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000e80)={0x12c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x12c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000d80)=""/73, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f00000023c0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3fa}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x40000000000016c, 0x0, &(0x7f0000003700)={0x77359400}) 05:05:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xf00}, 0x3c) [ 1030.051557][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1030.068864][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.082792][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.093370][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1030.106704][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1030.113677][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1030.122965][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.132149][T22399] usb 1-1: config 0 descriptor?? [ 1030.601681][T22399] elecom 0003:056E:00FF.009F: item fetching failed at offset 0/1 [ 1030.609561][T22399] elecom: probe of 0003:056E:00FF.009F failed with error -22 [ 1030.953476][ T3686] usb 1-1: USB disconnect, device number 97 [ 1031.720980][T22399] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1031.961016][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 1032.081034][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1032.092027][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.103711][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.113944][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1032.127425][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1032.134357][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1032.143701][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.152481][T22399] usb 1-1: config 0 descriptor?? 05:05:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106e05ff004000000000010902240001000000000904008980030100000921000000012201000905810300000000009f705f5b15478a6ce4190f5eb9b6648856"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0x8d, [{{0x9, 0x4, 0x0, 0x13, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x208}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x7f, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x0, 0x3f, 0xff, 0xe3}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x6, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xb4, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb2, 0x5, 0x1f, 0xec, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0xdc84, 0x1e000, 0x80, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3f, 0xc1, 0x800}]}, 0x4, [{0x45, &(0x7f0000000140)=@string={0x45, 0x3, "8d3132da8e863242bf010007ff9cf1940c01eed868746c497ce9edcd67128bbb5d688a7f04e16ab5de7f78f8a98f56c91d393dc8e128c2ec4363e7c3e75b6338423246"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x62, &(0x7f0000000200)=@string={0x62, 0x3, "7412cc49a1637f13fa8604348286ad10510681a749ca70d28e4728b59a2ec3ac1ffcb4bf84c1eee1a733937b1d24d9c588ea1bcfd81dc6586e65a83f0df1855d8d36b7267c498b5b79883c05739e04865e29d6bc32b367fede9b44a014f7d798"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, &(0x7f00000003c0)={0x0, 0x9, 0xc3, {0xc3, 0x22, "84c591de684a7d0a90166efb9d13fea61db72f95818c87d6ed4967754eb05ab98447d30cb385c1e9f9a554f82815d1136941185959c20ed7faec4f168b427f18bbd1dbce10bb92498c4fd9da11047be5b3686240cf77c85fe07315fb81ee50ba03ea0e92293c76ef7128d66eaccd6730ef9cc56639a731e56ca84b9a31e8043774202a2e6a89311a3923d1daaa7a40008eab7cefc756bdf86c064d1fa9a8cf080c3b49b14498e26485f208fe22f4cddea78a6e5b4052a0b672c1d4c217d787b055"}}, &(0x7f00000004c0)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "882584ef4859ff1940ce4bc53ec13fbd7b36764d28bce102244239147c9593391993acc2a43c88f5b3bf7599f930984a451768e898b2071dff8a4329997d8d257360b008eeb5644b1953a35fd9406396e18c52319e92d12f149f6e7a89466aed66ea8aea3695677b5b5f3898b18cad1526954d0623ee94f3c33317"}}, &(0x7f0000000340)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0xb, '{'}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x2, 0x0, 0x9, "0e8a"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x81, 0x1, {0x22, 0x1c3}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x20, 0xe, 0x92, "3f9bcf1229dfacc70acdffd216624c13b1580dec39420195aa19e05b63bee6456ec28bf225b9f6d9a25b3dfff54aef04f6e968d7d34c569f33fdb20970daf33ba2fd85041bea9718139a5361b1ba6cf2878dc5018119cd21eeff36518ac5d7dacd3bb6670658c4bfc18de69abac1dd763276cacf1d695aa35da55095fe049b2ad67a593ab07aa768025e0677414338cecf46"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x1, 0xe6, "0b5a6c1a130c7f0fa493c4221c3d51347303bffc732f7049b7d062dcb1d4bd8d077333664745e3ba5f80d5094391fbdb1e04776dfe4d18189e9c86c2c2b45da21695bfcd89eac828629fa76b5975ff3d7eabbd08c77053098ea81817b039a8c49c887d7d2cffa46f82fe9d47436e54cbdd4e2be4b087951a89911ba2b226eec35c88d1edaa63d67a91a8bb4331fc41f0b0dcad29a3056ccc98b3ee6773c573a3b7cf07c2e91b066da5e3efdc823fd5d4e58a3b900bc2467d23847beade3ecc310705020fc44a10b655f34af6cb24f976e4867013940d700525c8fe40b4e575546b98aec4f4c8"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x5}}) 05:05:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:03 executing program 5: prlimit64(0x0, 0x2, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x2577}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x20, 0x400000000, 0x400) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x6, 0x7, 0x3}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='syscall\x00') sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c0000000c0a010300000000000000000700000508000440000000030900020073790100010000000000010073797a31000000000900010073797a31000000000000050a010300000000000000000a00000308000540000000000c0002400000000000000001080007006e617400100008800c0002400000000000000003140000001100010000000000000000000000000a585afaaa3d875069b0940ef36304c1c1e32632035752d804a8cdbdac8c006d4d934b66778fbb73e509a21a2d60988fb6879dec7711556124be4a2927da624de1361f65d964da21cbce254000"/258], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000054) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x289) r5 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r5, 0x107, 0xb, 0x0, &(0x7f0000000080)) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/151) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="72d5499415ea6ff06bd208313c4f17c3772d273c37b93ce673c545e80e4b700290841fb96975ff06cab19459b642e1ad798c0e47f5f9e0", 0x37}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:05:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="bb0e000000000000b80012800800010076746900ac0002800800000001000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030082ea000008000300ff0f000008000100", @ANYRES32=0x0, @ANYBLOB="080003008e0b0000080006000001000008000200000000000800020000000000080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="0800050000000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000008002080006003f000000080006000800000008000200090000000800030006000000080004000a", @ANYRES32=0x0], 0xe8}}, 0x0) 05:05:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) wait4(r0, &(0x7f0000000140), 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mknod(&(0x7f00000000c0)='./file0\x00', 0x80, 0x80000000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1100}, 0x3c) 05:05:03 executing program 4: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000300)) 05:05:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1, 0x0, 0x0, 0x218}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 05:05:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:03 executing program 4: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='lo\x00'], &(0x7f00000007c0)=[&(0x7f00000003c0)='/dev/ttyS3\x00', &(0x7f0000000400)='-\x00', &(0x7f0000000440)='(\xe0\xf5\x00', &(0x7f0000000480)='system\x02\xe8\xb0C\xc5k\xe3\x06\x00\x00z2\x89\x02\xaa\xac.0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100ef0000000005000000000000", @ANYRES32=r3, @ANYBLOB="000020000000100024001200140001046272696467655f736c617665000000000c0005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 05:05:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1300}, 0x3c) 05:05:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(r1) syncfs(r1) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000200)=""/129, 0x81}], 0x2, 0x0) 05:05:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000180)=0x18000000, 0xffffffffffffffff, &(0x7f0000000200)=0x10001, 0x101, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f00000000c0)=""/140) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1100000042000506000000366ab1001000ed623c087dcbffa241ee19776b1d9ada6676c7517f97b2d3add33b040000004c651514f99a98a2863c7c3935f1a55500000000000000000000010000000000009aa5db"], 0x14}}, 0x0) 05:05:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1400}, 0x3c) [ 1035.380769][ T3686] usbhid 1-1:0.0: can't add hid device: -71 [ 1035.386773][ T3686] usbhid: probe of 1-1:0.0 failed with error -71 [ 1035.395403][ T3686] usb 1-1: USB disconnect, device number 100 05:05:06 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'ppp0:#}\'^mime_type&,.'}, {0x20, '{secuxnet0'}, {0x20, 'cpusetproc'}], 0xa, "2ea5b8cf4d836511feb30d00f561cb0006e55c337f81cdf34bfc07bbc0dd154cabd2b1df19e5de180a1a885bc0ba4960cb06a04bf3ff7caa0543afe1124ef263964e"}, 0x79) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 05:05:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1600}, 0x3c) [ 1035.790688][ T3686] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1036.030772][ T3686] usb 1-1: Using ep0 maxpacket: 16 [ 1036.150839][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1036.162709][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.174837][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.185388][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1036.198888][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1036.205870][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1036.215208][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.231907][ T3686] usb 1-1: config 0 descriptor?? [ 1036.711255][ T3686] elecom 0003:056E:00FF.00A1: item fetching failed at offset 0/1 [ 1036.719063][ T3686] elecom: probe of 0003:056E:00FF.00A1 failed with error -22 [ 1036.911809][ T3686] usb 1-1: USB disconnect, device number 101 [ 1037.680590][T22399] usb 1-1: new high-speed USB device number 102 using dummy_hcd 05:05:09 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1700}, 0x3c) 05:05:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x3, 0xffffffff}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x20000000) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x200}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x28b12728, 0x8, 0x80000001, 0x9, 0x9, 0x1, 0x80000000}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) write(r5, &(0x7f0000000100)="2c473c41cc87a356cf4841f66cc0e71d520ee314dc9740abb2a493b667fda2ef0dad0c94a1ca95708f55183799ddffe0759746dd14ec263ac67d4949fecc312d3581095f3faa82dde7a19d629f80", 0x4e) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:05:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) r2 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000180)={'\x00', 0x9}) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket(0x22, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:09 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) 05:05:09 executing program 4: bind(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lj\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x00\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^\x03\x00!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1b\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1c01}, 0x3c) 05:05:09 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1d00}, 0x3c) 05:05:09 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x6000000}}}}]}, 0x78}}, 0x0) 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x1e01}, 0x3c) 05:05:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x21, 0x1, '%}%\\keyringem1lo&,ppp0.md5sum'}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x44890) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:05:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002c40)='net/dev\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ethtool(0x0) sendfile(r1, r0, 0x0, 0x800000080004103) 05:05:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x24) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 1038.670498][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 1038.856238][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1038.871059][T25267] ================================================================== [ 1038.879129][T25267] BUG: KASAN: out-of-bounds in unwind_next_frame+0x1346/0x2230 [ 1038.886673][T25267] Read of size 8 at addr ffff8881944d79e8 by task syz-executor.5/25267 [ 1038.894884][T25267] [ 1038.897197][T25267] CPU: 1 PID: 25267 Comm: syz-executor.5 Not tainted 5.4.40-syzkaller-00120-g228c59bb379b #0 [ 1038.907306][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.917328][T25267] Call Trace: [ 1038.920592][T25267] dump_stack+0x14a/0x1ce [ 1038.924889][T25267] ? show_regs_print_info+0x12/0x12 [ 1038.930063][T25267] ? printk+0xd2/0x114 [ 1038.934110][T25267] print_address_description+0x93/0x620 [ 1038.939634][T25267] ? arch_stack_walk+0xd8/0x120 [ 1038.944462][T25267] ? unwind_next_frame+0x1688/0x2230 [ 1038.949712][T25267] __kasan_report+0x16d/0x1e0 [ 1038.954356][T25267] ? unwind_next_frame+0x1346/0x2230 [ 1038.959606][T25267] kasan_report+0x34/0x60 [ 1038.963903][T25267] ? unwind_next_frame+0x697/0x2230 [ 1038.969067][T25267] unwind_next_frame+0x1346/0x2230 [ 1038.974160][T25267] ? preempt_schedule_irq+0xc8/0x140 [ 1038.979414][T25267] ? retint_kernel+0x1b/0x1b [ 1038.984136][T25267] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 1038.990087][T25267] ? unwind_next_frame+0x2230/0x2230 [ 1038.995348][T25267] ? retint_kernel+0x1b/0x1b [ 1038.999906][T25267] ? __schedule+0x918/0xef0 [ 1039.004378][T25267] ? in_sched_functions+0x9/0x40 [ 1039.009299][T25267] ? stack_trace_consume_entry_nosched+0x189/0x260 [ 1039.015768][T25267] ? stack_trace_save_tsk+0x490/0x490 [ 1039.021109][T25267] arch_stack_walk+0xf4/0x120 [ 1039.025760][T25267] stack_trace_save_tsk+0x2e7/0x490 [ 1039.030925][T25267] ? stack_trace_consume_entry+0x230/0x230 [ 1039.036697][T25267] ? _raw_spin_lock+0xa1/0x170 [ 1039.041440][T25267] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1039.047910][T25267] ? __ptrace_may_access+0x2b4/0x530 [ 1039.053164][T25267] ? kmem_cache_alloc_trace+0xc3/0x280 [ 1039.058599][T25267] proc_pid_stack+0x12f/0x1f0 [ 1039.063242][T25267] proc_single_show+0xd3/0x130 [ 1039.067975][T25267] seq_read+0x4aa/0xd30 [ 1039.072115][T25267] do_iter_read+0x43b/0x550 [ 1039.076595][T25267] do_preadv+0x213/0x350 [ 1039.080815][T25267] ? do_writev+0x5b0/0x5b0 [ 1039.085291][T25267] do_syscall_64+0xcb/0x150 [ 1039.089763][T25267] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.095623][T25267] RIP: 0033:0x45c829 [ 1039.099501][T25267] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1039.119085][T25267] RSP: 002b:00007fb5cf23cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1039.127469][T25267] RAX: ffffffffffffffda RBX: 00000000004fa460 RCX: 000000000045c829 [ 1039.135409][T25267] RDX: 000000000000037d RSI: 0000000020000500 RDI: 0000000000000007 [ 1039.143362][T25267] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.151305][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1039.159248][T25267] R13: 0000000000000862 R14: 00000000004cb23c R15: 00007fb5cf23d6d4 [ 1039.167188][T25267] [ 1039.169509][T25267] The buggy address belongs to the page: [ 1039.175122][T25267] page:ffffea00065135c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 1039.184202][T25267] flags: 0x8000000000000000() [ 1039.188850][T25267] raw: 8000000000000000 0000000000000000 ffffea0006513588 0000000000000000 [ 1039.197402][T25267] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1039.205959][T25267] page dumped because: kasan: bad access detected [ 1039.212335][T25267] [ 1039.214629][T25267] Memory state around the buggy address: [ 1039.220226][T25267] ffff8881944d7880: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 1039.228253][T25267] ffff8881944d7900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.236281][T25267] >ffff8881944d7980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.244740][T25267] ^ [ 1039.252163][T25267] ffff8881944d7a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.260279][T25267] ffff8881944d7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.268315][T25267] ================================================================== [ 1039.276348][T25267] Disabling lock debugging due to kernel taint [ 1039.283897][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.295383][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 05:05:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x2000}, 0x3c) 05:05:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) setregid(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 05:05:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1039.305568][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1039.318863][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1039.325791][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1039.336593][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.351958][T22399] usb 1-1: config 0 descriptor?? 05:05:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="7ebe12fb168de10080708f21c819", 0xe}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r5}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x0, 0x0) 05:05:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 05:05:10 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:05:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$inet6(0xa, 0x800, 0x7) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:05:11 executing program 0: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010ac054e06000000000001090224000100000081090400898003010000092100000001220100090581030000000000415a04f19468"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$FUSE_DIRENT(r6, &(0x7f0000000040)={0x158, 0x0, 0x3, [{0x5, 0x2, 0x7, 0x2, '\'md5sum'}, {0x1, 0x17, 0xa, 0x92, 'security\\)'}, {0x0, 0xfffffffffffff800, 0x1, 0xac, '@'}, {0x2, 0xffffffffffffff9b, 0x4, 0x2, 'ppp1'}, {0x3, 0xd, 0x16, 0x1, '/!$ppp1#!%-wlan0cpuset'}, {0x2, 0xe1ea, 0x0, 0x800}, {0x5, 0x3, 0x0, 0x400}, {0x5, 0x6, 0x3, 0x35ca, 'em0'}, {0x3, 0x9, 0x1, 0x0, '}'}, {0x6, 0x101, 0x8, 0x2, ').cpuset'}]}, 0x158) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:05:11 executing program 4: 05:05:11 executing program 4: 05:05:12 executing program 4: 05:05:12 executing program 4: 05:05:12 executing program 4: 05:05:12 executing program 4: 05:05:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xe002}, 0x3c) 05:05:12 executing program 4: [ 1041.010337][T22399] usb 1-1: new full-speed USB device number 103 using dummy_hcd 05:05:12 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1041.380400][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1041.391689][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1041.403400][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.413770][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 05:05:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40), 0x3fffef1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:05:12 executing program 4: [ 1041.427272][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1041.434235][T22399] usb 1-1: New USB device found, idVendor=05ac, idProduct=064e, bcdDevice= 0.00 [ 1041.443684][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.455268][T22399] usb 1-1: config 0 descriptor?? [ 1041.941005][T22399] hid-generic 0003:05AC:064E.00A3: item fetching failed at offset 0/1 [ 1041.949303][T22399] hid-generic: probe of 0003:05AC:064E.00A3 failed with error -22 [ 1042.142039][T22399] usb 1-1: USB disconnect, device number 103 [ 1042.910187][ T3686] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1043.270255][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1043.281225][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1043.292968][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.303315][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1043.316774][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1043.323711][ T3686] usb 1-1: New USB device found, idVendor=05ac, idProduct=064e, bcdDevice= 0.00 [ 1043.333080][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.341964][ T3686] usb 1-1: config 0 descriptor?? 05:05:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0xfc03}, 0x3c) 05:05:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80), 0x0, 0x2021, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0), 0x4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:14 executing program 4: 05:05:14 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)={0x3, {{0x2, 0x4e24, @loopback}}, 0x0, 0x6, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @multicast2}}]}, 0x390) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) r4 = accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) fsopen(&(0x7f00000001c0)='nfs\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x5, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)={0x2e, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x3, 'lblcr\x00', 0x8, 0x6, 0x32}, 0x2c) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:05:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000480)=0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="db80833c000000002800128008000a00046974001c00028008000200ac1414bb08000300ffffffff0600080000000000080004000100010008000a00", @ANYRES32=r4, @ANYBLOB="7c948bb8bf1d056aff8c3f66a9e7557d6ee6f9aacc6c3c39525b52c124610b08dbadc0d92718a0368001bbdc46c1347e66c3c076f850cf65943e314a14325e263102ecc465b2f6630aa5ba02"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f824c7b368c41b6b4e16900001c0079c831180ea3d6ceea3604a45e10002dbd706fff04000000f8d18b000000", @ANYRES32=r4, @ANYBLOB="06000900060005000100000014000100fe800000000000000000000000000042"], 0x38}}, 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x5, 0x46, 0x0, 0x4, 0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 05:05:14 executing program 4: 05:05:14 executing program 4: 05:05:15 executing program 4: 05:05:15 executing program 4: 05:05:15 executing program 4: 05:05:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x1, 0x6}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x19, 0x0, 0x0) close(r3) preadv(r3, &(0x7f0000000500), 0x0, 0x1) [ 1043.620228][ T3686] usbhid 1-1:0.0: can't add hid device: -71 [ 1043.627967][ T3686] usbhid: probe of 1-1:0.0 failed with error -71 [ 1043.646914][ T3686] usb 1-1: USB disconnect, device number 104 05:05:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x101000}, 0x3c) 05:05:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x2}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 05:05:15 executing program 4: [ 1044.040189][ T3686] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1044.280085][ T3686] usb 1-1: Using ep0 maxpacket: 16 05:05:15 executing program 4: [ 1044.400122][ T3686] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1044.411123][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.422952][ T3686] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.433213][ T3686] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1044.446775][ T3686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1044.453762][ T3686] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1044.463128][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.472033][ T3686] usb 1-1: config 0 descriptor?? [ 1045.038847][T25485] /dev/loop0: Can't open blockdev [ 1045.060702][ T3686] elecom 0003:056E:00FF.00A4: item fetching failed at offset 0/1 [ 1045.068503][ T3686] elecom: probe of 0003:056E:00FF.00A4 failed with error -22 [ 1045.261560][ T3686] usb 1-1: USB disconnect, device number 105 [ 1046.039942][T22399] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1046.279947][T22399] usb 1-1: Using ep0 maxpacket: 16 [ 1046.400009][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1046.410969][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.422643][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.432921][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1046.446398][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1046.453326][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1046.462695][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.471500][T22399] usb 1-1: config 0 descriptor?? 05:05:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x200000}, 0x3c) 05:05:17 executing program 4: 05:05:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x2, 0x3, 0xfffffffffffffffc, 0x2}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 05:05:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000280)={0x8, {0x5, 0x10000, 0x4, 0x8, 0x800, 0x200}}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x5, &(0x7f0000000200)=""/80) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'ip6gretap0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x5, './file0\x00'}}) 05:05:17 executing program 4: 05:05:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x2010, r4, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r1}, 0xc) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000200)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x80, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x6c, 0x4}) r7 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80, 0x0) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x47c, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfb, {0x3, 0x1, 0x26, [0x4, 0x1, 0x400, 0x1, 0x8, 0xed0eef1, 0x996, 0x400, 0x5fc7, 0x0, 0xe5e, 0x101, 0x1ff, 0x800, 0x6, 0x4e, 0x0, 0x8, 0x81, 0x9, 0xe0, 0x9, 0x4, 0x4, 0x8001, 0x24, 0xfffffff9, 0x26ba, 0x4, 0x2, 0x5, 0x6, 0x1, 0x3ff, 0xfff, 0x200, 0xbd3, 0x9, 0x8, 0x80, 0x9, 0x7, 0x6, 0x9, 0x1, 0x2, 0x400, 0x2e, 0x101, 0x7, 0x3, 0x3, 0x0, 0x9, 0x4, 0x5, 0x7, 0xb7c, 0x4, 0x1000, 0x3, 0x0, 0x9, 0x752c], [0x3f, 0x3, 0x1, 0x6, 0x9, 0x7, 0x80000001, 0x8, 0x4, 0x0, 0x4, 0x100, 0x40, 0x4, 0x1, 0x6, 0x6, 0x2, 0x8, 0x3e5709b, 0x8000, 0x7, 0x0, 0x9, 0x1, 0x8, 0x101, 0x2, 0x2, 0x2, 0x1ff, 0xffffffff, 0xfffffffe, 0x6, 0x5, 0x0, 0x1, 0x6, 0x4, 0x4, 0x2, 0x6, 0x3, 0x81, 0x80, 0x9, 0x80, 0x9, 0x3, 0x9, 0x6, 0x9e, 0x0, 0x4, 0x80000001, 0x5, 0x684de5f8, 0x1000, 0x81, 0x5, 0x3, 0x1f, 0x7f, 0x4], [0x1f, 0x7fff, 0x8, 0xd91, 0x8000, 0x0, 0x9, 0x3, 0x7fffffff, 0xd6c2, 0x9, 0x6, 0x400, 0x1ff, 0x0, 0x5, 0x66c53fc3, 0x0, 0x3ff, 0x432, 0xfff, 0x7f, 0x7, 0x20, 0x3ff, 0x1, 0x0, 0x1f, 0x3, 0x10001, 0x8001, 0x800, 0xa, 0x0, 0x89, 0xaef4, 0x3, 0x2, 0x8, 0x6, 0x7f, 0xf249, 0x4, 0x800, 0x8000, 0x8, 0x6, 0x3, 0x940000, 0x9, 0x4, 0x6a, 0x45, 0x5, 0x62aa, 0x7, 0x1000, 0x3, 0x1, 0x8, 0xfffffeff, 0x7, 0x1, 0x8], [0x1, 0xff, 0x9, 0x9, 0x7fffffff, 0x3, 0x5, 0x1, 0x1ff, 0x3, 0x1000, 0x621, 0x4, 0x7, 0xe7, 0xff, 0x2, 0x0, 0x9, 0x6cc, 0x1f, 0x8000, 0x9, 0xe4, 0x3, 0xfffffe00, 0xf6f, 0x8000000, 0x5ec, 0x442ee064, 0xf3, 0xfffffff7, 0x4, 0x5, 0x2020000, 0x2, 0x8, 0x4, 0x96, 0x2, 0x4, 0x0, 0x2, 0xa1, 0x0, 0x8, 0x8, 0x3, 0x9, 0x1, 0x68, 0x0, 0x5, 0x6, 0x7f, 0x6, 0x7, 0x8, 0x1, 0x4, 0x4, 0x5, 0xa3e8, 0x81], 0x5b, ['system,systemcpuset/)-loeth1securityvmnet1\x00', 'ppp1&security\x00', '\x00', '\x00', '\xccself)cpusetcpusetppp0vboxnet0]\x00']}, ["", "", "", "", ""]}, 0x47c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000800) 05:05:18 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000003efa8c68d000000000000000000000a2000000003070105"], 0x1}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={{0x14, 0x605}, [], {0x14}}, 0x28}}, 0x0) 05:05:18 executing program 4: ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506000000366ab1001000ed623c087dcbffa241ee19776b1d9ada6676c7517f97b2d3add33b"], 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1046.649977][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 1046.656280][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 1046.664420][T22399] usb 1-1: USB disconnect, device number 106 05:05:18 executing program 4: ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506000000366ab1001000ed623c087dcbffa241ee19776b1d9ada6676c7517f97b2d3add33b"], 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:05:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x202000}, 0x3c) 05:05:18 executing program 4: ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506000000366ab1001000ed623c087dcbffa241ee19776b1d9ada6676c7517f97b2d3add33b"], 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1047.049895][T22399] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1047.289872][T22399] usb 1-1: Using ep0 maxpacket: 16 05:05:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 05:05:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x300000}, 0x3c) 05:05:18 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prlimit64(r2, 0x6, &(0x7f00000001c0)={0x5, 0x400000008f}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) [ 1047.419934][T22399] usb 1-1: too many endpoints for config 0 interface 0 altsetting 137: 128, using maximum allowed: 30 [ 1047.431147][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.442899][T22399] usb 1-1: config 0 interface 0 altsetting 137 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.453172][T22399] usb 1-1: config 0 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 1047.466790][T22399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1047.474281][T22399] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 1047.484032][T22399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.492868][T22399] usb 1-1: config 0 descriptor?? 05:05:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) 05:05:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x400000}, 0x3c) [ 1048.239889][T22399] usbhid 1-1:0.0: can't add hid device: -71 [ 1048.245905][T22399] usbhid: probe of 1-1:0.0 failed with error -71 [ 1048.254083][T22399] usb 1-1: USB disconnect, device number 107 05:05:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c03, &(0x7f0000000500)) 05:05:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x402001}, 0x3c) 05:05:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 05:05:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000380)={0x38, 0x3, 0x6, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000340)='virt_wifi0\x00') write(r3, &(0x7f0000000340), 0x41395527) write$P9_RLINK(r2, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000440)=""/22, 0x16}], 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffcb0) write$P9_RLERROR(r5, &(0x7f0000000100)={0x10, 0x7, 0x1, {0x7, '*system'}}, 0x10) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'system.', 'stack\x00'}, &(0x7f0000000200)=""/162, 0xa2) 05:05:20 executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:05:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xff) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x3, 'macvlan1\x00', 0x2}, 0x18) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 05:05:20 executing program 4: syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) socket$netlink(0x10, 0x3, 0x0) 05:05:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:05:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'vlan0\x00'}) 05:05:20 executing program 4: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') r1 = gettid() tkill(r1, 0x33) fchdir(r0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 05:05:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x1, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x80ffff, 0x48c4], 0x0, 0xffffffffffffffff, 0x80ffff}, 0x3c) 05:05:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\xc1\a\xae/\x81\x8dN&\ad\xdb\xc3\xe82\x1b\xfd\x8a\x03\x9aJ\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\xe13\xfd\x9f\'\xf2\x99\"\x1e\xa6\v\x13\xb7 \xed\xe3\xd7\xde\xcf\xb8\x86\x8b&\x9d\xcf\xa1\xab\xaf\xf5z\xa7?\rpjv\x05m\xfd\x89MbRz?\ft\xd2!\xe8k\xc4sc\x18b\xb6\xfc\xbe\x8b\x86F\xfdT{M\xd5\x03Y\x90tM\xa1>Q\x97$\x1b\xd7T\xf79\x06+\x06E\"\x19\x90\xba\xaf\x05\x10\x156\xa8\x9a\x99\xbd\x1a\x9d9\xc6R\x89{7\rca|\x7f`\xb88*\xcf;\n\x98\xd8\'\xf8[\xb3\xa4\x16l\xfak\x83h\x83\xf2\x9f\x89\xa65\xcc\xc8\x16\xa2c#\xa4\xea\x03p\x9c\n\xb7h\xdaN\xb6\xb1\x9f\x87SC\xe4:\xb4(H\x8f\x18/\xbe* \x02\xc9\xe9V\x0fF\x12\x0e\x8b\xb8\xcf\x00\x83\xcb!0\b\xd3d\xb3_\xc2\xf8\f\xa6A`\xc5=\xa2\t}\xfeK/-\x90yQlXM\xba\xdf)\x91(\x9a\xac\x12\xc7\xb7\x11\xa9S\xd2aX\xa4\xed\xa2\x7f\xf2#\x9fH4\xa9\xb9\x90\xe4\xad\x05\x9aaaW\x1d\x94\x85\'O]\x84\x8d\xef\xe4^\x00\xc7\xd5\x85\x8f\x86\xcb\xa2A2\xd1n\xe6\xb0\xcf\td\x88\x86\xa2\x97h\x85\x96R\xa7tO6\r\xc9\x16i\x06\x0f\x1f\x13H3\xc3\xdf\xde\xb2Ua\xde\v\xf8\xc0\xcc\xe1\x14\xea\xd7\x85\xf7\xe8v\xf4\x8b\xc1\xec\xce\x8c\x0f&\xe7g\x92*\x8d\xb2Q\xbdf\xc1\b0\x8b\x1b8\x13\x9ch\x8f\x14I?4X\xaf\xfb\xa4\xc8 \x90\x00\x00\xb5\x8b\x00\x00\x00\x00\x00\x00#Md\xf3\xf5\xe6a\x86G.\xe41\xaa\x98$\x95\xeab\x04 \x80O\xe8@\x16\x86\x83\xea\xdb\xf0\xef0u\xf0\xae\xeb\xd5\x1e\xfe8\xbd\xfd\x7fv\xd8\xd2\xee\x18\'\x85\xec\xc4\xe2a@\x8e\xffD\x92\xa0\x16\x12\xf0\xe3\xb1\xe5\xec\x8b\xe8\xef\xbb\x8e\xe3Y\x03n\x06\xf4\x13\x82t\x02|\x98\xbb\x10\xd0*gE\x9e\x9d\xd9\x00\x00\x00\x00\x00\x83\xdc\xc1[\xb1\x19-\x13w\xd2\xcf\xf1b\xe7\xe6G\xb5\x11\xac\a\xab\x1d\xf2\xe5KQ\xb5\xb0\x81\x1f$\xbc\xf7v\xbc[;M\xcc\xcc\xbb\xc2\xbf\xb4\xc3\xe7x\xccg\x03%\x8d\x14\x14\xe0@\xfaN\xaf\xedu\xd9\x83DsE\x13\xf6\xf6\xb9\x9b\x90\x81\xc1\xe9\xe3\xb2\x00\xba\x7f\x1c\x94b\x8e\xa7\xc1I\xb3ZT\xb6\x16c\x96=\x93\xca\xc7\x9ewxe\xa9\x82bW\xc7M\xb1Bfk\\\x91&I\xcfB5]\x1fs\x02\x1d;\x94=_\xde\xa7#\xba\xd3\xf8\x1dLV\xe2n\x97\xe1\xbc\xbb\xcc\x1b\xf1\xe7\xf3\xfa\xa8xTU\x1cxP2@\x93\a]\x0e\xb3\x83\x8e\x91\x92d\xd4\x1c\x1f\x00\xb34J\x80\xe8\xee\xe2\x7f\xab5;cq\xecT\vz\"j\x84\x15e\xa8\xe8\xe7\x95\f\x90\xbd\xd2\xa7ZY\xc0\xbd\x96\r{\x02\xce\xdd\x95\x97\xf7\xcdm\x87&\xb6\xcb\x85_\xe5eB\xaf\x8e\xf2\x80\x96eA\xda\xb4\xc6H\xb9f\x8c1S\xdc\xe9\xff\xec\x85\xde@\x0e{0A>\b\x9e-\xcep\xf0\xe9\xb9\xb1\xe3*q\xbb\xe6\x96W\xc6\xde#\xdc\\\xa1\xd8\nA\xba\xa71\xe3D}5\xf2U3zg\xbd5\xef\x8a\xc7\xd3\xb9\xd2J@\xaca;#\xe0]c\xddfYs\xd2\xac\xecB\vC\xd35c\xb2E\x81!\a\n\xfd\x95\"\xbc\xd5%\x04\xeb/\x0f\xe3d\x1aF\f\xd0\xde\x9d\r\x8f\x8f7\xd1w\xe1H~\x93z5\xc0-\x87\x7f3.y\x9f=\xb6g\xabQ\x9a0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={{0x14, 0x60d}, [], {0x14}}, 0x28}}, 0x0) 05:05:20 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000001600)="d0", 0x1}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') preadv(r2, &(0x7f00000017c0), 0x2c6, 0x0)