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", 0x1000}, {&(0x7f0000001280)="e96b48167016764006b75a3afa6725daa8fde12ecd8c54d75327a1da72739ca3f7593bad37aa6a4d712b462b15b7556f85e3f509f307894c9791b846d9dc5c8e733d903b96852c4d6ff9b0a04d8326ae2f08563605f5a526aedff1be8ed8cb633c9f5d3b1c99259ae81e2279ff0d3f1bb5952461e6f493113e0b7b1e99c707475163b2e6fc1e6bf131e7bdac2b09db40679ebd33f8c858a56ed7075c5f4c963ba05af7991f9152bef16748b294531e6df2e7e554f56d19402fc09e790c2ca8d52bde2d8e6f0c29781a", 0xc9}, {&(0x7f0000001380)="74b4b12649b9c066de183f6c726e237c6cbfad258ba6d20416b773a1a7470a41c29b9cda84f1d765c880dfa3bb7aa233f5c1b679ce3aa4f85d993a274fd24a5ac26cd9c583ecc45196e2b9168d4055d7f504a63e45843e8431d96b1939eb90cc295dad8d3309aba04be1bf2b3cd4b344d0868431fa73b2260570dc530f31628a56a2ae79d096f574174524bc45204d7b4f497282bbf21b9b9d7f3f5ffe82e3b3af70", 0xa2}], 0x4, r4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40000, 0x0) preadv(r0, &(0x7f00000017c0), 0xda, 0x0) 23:02:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x401, 0x7, 0x7, 0x52, 0xffffffffffffffff, 0x2, [], 0x0, r6, 0x0, 0x3, 0x5}, 0x40) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:02:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xb00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 356.163819][ T8917] usb 5-1: new high-speed USB device number 28 using dummy_hcd 23:02:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xf00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 356.363797][ T2713] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 356.413942][ T8917] usb 5-1: Using ep0 maxpacket: 8 23:02:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 356.534379][ T8917] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 356.560831][ T8917] usb 5-1: config 0 has no interface number 0 [ 356.601017][ T8917] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 356.613854][ T2713] usb 2-1: Using ep0 maxpacket: 8 23:02:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3800, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 356.691069][ T8917] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 356.734080][ T2713] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 356.749490][ T8917] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 356.763674][ T2713] usb 2-1: config 0 has no interface number 0 [ 356.792774][ T2713] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 356.833007][ T8917] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 23:02:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x4000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 356.904008][ T2713] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 356.940978][ T8917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.976351][ T2713] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 356.994815][ T8917] usb 5-1: config 0 descriptor?? [ 357.020643][ T2713] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 357.035657][T14822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 357.043127][T14822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 357.075506][ T2713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.119613][ T2713] usb 2-1: config 0 descriptor?? [ 357.144238][T14835] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 357.151507][T14835] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 357.313117][ T2713] usb 5-1: USB disconnect, device number 28 [ 357.427718][ T8917] usb 2-1: USB disconnect, device number 22 23:02:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:09 executing program 0: socket$pptp(0x18, 0x1, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r1+30000000}}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2001}) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x1, @empty}}, 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="88"]}) r5 = syz_genetlink_get_family_id$ipvs(0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x80, r5, 0x2, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x15}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000014}, 0x4080) 23:02:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002c0012800b00010067656e65766500001c000280060005004e23000005000a0000000000080001"], 0x64}}, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) fcntl$setstatus(r3, 0x4, 0x40c00) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 23:02:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:09 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xda6d, 0x10080) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000300)={0x5, @pix={0xfffffffe, 0x20000, 0x0, 0x0, 0x4}}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x604b00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000200)={0x0, 0xb4, 0x0, 'queue1\x00', 0x9}) tkill(r5, 0x2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c47256ef8056"}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000040) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ptrace$getregs(0xe, r5, 0x9, &(0x7f0000000000)=""/250) 23:02:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 358.114780][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:02:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080001800c0007000000b80000e12d006cf45967f79936f7568c351f3bd7813238d264d24a87d5cacc31337b3617f43f9a78155625025a1483882d0cb70e0f42c9893955c58f96cbbabe554e4967ab03169f3325cb2c3c98ff6bb2adee299889b8dfbdf816373285c0f31e"], 0x3c}}, 0x0) [ 358.200727][T14934] device geneve3 entered promiscuous mode 23:02:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x2, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c10000010000000000000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7f}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 23:02:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 358.331337][T14957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) bind$l2tp6(r2, &(0x7f0000000240)={0xa, 0x0, 0x7ff, @remote, 0x7, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f0000000100)={{}, {0x0, r8+30000000}}, 0x0) dup3(r6, r5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0xd0}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) [ 358.393615][ T2713] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.443741][ T3571] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 358.663963][ T2713] usb 2-1: Using ep0 maxpacket: 8 [ 358.713679][ T3571] usb 5-1: Using ep0 maxpacket: 8 [ 358.783907][ T2713] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.791949][ T2713] usb 2-1: config 0 has no interface number 0 [ 358.818604][ T2713] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 358.854310][ T3571] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.857783][ T2713] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 358.900610][ T3571] usb 5-1: config 0 has no interface number 0 [ 358.900856][ T2713] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 358.915051][ T3571] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 358.922534][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.949976][ T2713] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 358.950280][ T3571] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 358.970843][ T2713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.983750][T14934] device geneve3 entered promiscuous mode [ 358.991451][ T2713] usb 2-1: config 0 descriptor?? [ 359.016032][ T3571] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 359.023963][T14935] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 359.037851][T14935] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 359.039705][ T3571] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 359.059455][ T3571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.076789][ T3571] usb 5-1: config 0 descriptor?? [ 359.095042][T14942] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 359.102566][T14942] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 359.277869][ T8917] usb 2-1: USB disconnect, device number 23 [ 359.340885][ T3562] usb 5-1: USB disconnect, device number 29 23:02:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0), 0xa55411131c2680b, 0x1, 0x0, 0xffffffcb) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffff9) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r6, 0x107, 0xf, &(0x7f0000000040)="822f9287", 0x4) bind(r6, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0703000006"], 0x22) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000280)=""/111, &(0x7f0000000100)=0x6f) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 23:02:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000001e, 0x1, 0x0) r2 = dup2(r1, r0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4), 0x0, 0x3, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x40002002}) write$P9_RSTAT(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="620000007d010000005b000800030000000203000000000000fbffffffffffff20010500000000020000380e0000000000000a0073797a6b616c6c6572000a0073797a6b616c6c6502000a0073797a6b616c6c6572000a0073797a6b616c6c65720033a2fb32dee3656a78b77ad03b53d383de2341f618874375d860037f0639661cb46aaa7d7b5d81c64168e473163b6e2c9cdedf8975e1a1a62dc0299706758b7d25b39cbc0af17c97568e02daad3eceb6ff8a2f00a0bf54e4d3ce367b4d8fdcb92bf96b6a0254fbf0e3af7995"], 0x62) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3d}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 23:02:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000, 0x0, 0x0, 0x4, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x6, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x7, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x8, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() time(&(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000300)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r1}}}], 0x28}}], 0x1, 0x0) r2 = socket(0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1410, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x28}}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000300)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/28, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) 23:02:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000, 0x0, 0x0, 0x4, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 360.253721][ T8917] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 360.293478][ T2713] usb 5-1: new high-speed USB device number 30 using dummy_hcd 23:02:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xb, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 360.447587][T15086] IPVS: ftp: loaded support on port[0] = 21 [ 360.511215][ T8917] usb 2-1: Using ep0 maxpacket: 8 [ 360.543483][ T2713] usb 5-1: Using ep0 maxpacket: 8 [ 360.633969][ T8917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.642566][ T8917] usb 2-1: config 0 has no interface number 0 [ 360.659741][ T8917] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 360.673186][ T2713] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.688388][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 360.701472][ T2713] usb 5-1: config 0 has no interface number 0 [ 360.717082][ T2713] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 360.732860][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 360.751970][ T8917] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 360.761728][ T2713] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 360.780204][ T8917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.788948][ T2713] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 360.807685][ T2713] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 360.821488][ T8917] usb 2-1: config 0 descriptor?? [ 360.842412][ T2713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.863866][T15057] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 360.877905][T15057] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 360.885868][ T2713] usb 5-1: config 0 descriptor?? [ 360.921951][T15065] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 360.944216][T15065] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 361.138559][ T2713] usb 2-1: USB disconnect, device number 24 [ 361.207334][ T8917] usb 5-1: USB disconnect, device number 30 [ 361.437037][T15149] IPVS: ftp: loaded support on port[0] = 21 23:02:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:13 executing program 3: perf_event_open(&(0x7f0000001d00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c00, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/206, 0xce}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000100)=""/4, 0x4}], 0x6, &(0x7f0000000580)=""/230, 0xe6}, 0x1000}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f00000008c0)=""/65, 0x41}, {&(0x7f0000000940)=""/14, 0xe}, {&(0x7f0000000980)=""/59, 0x3b}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/9, 0x9}, {&(0x7f0000001a00)=""/219, 0xdb}], 0x8, &(0x7f0000001c80)=""/87, 0x57}, 0x10001}], 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x14081, 0x0) read$char_usb(r4, &(0x7f0000001d80)=""/170, 0xaa) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$instantiate(0xc, r2, &(0x7f0000001b80)=ANY=[@ANYBLOB="6e65772064656661756c742074727573e1775fbd8c8a671f1b65838c53803d7465643a9e09a2c34eed3eae30"], 0x2c, 0xfffffffffffffffb) preadv(r1, &(0x7f00000017c0), 0x1000000000000212, 0x0) 23:02:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xf, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/91) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 23:02:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x2}}, 0x9, 0x9, 0x2, 0x0, 0x466}, &(0x7f0000000500)=0x98) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x519, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0971, 0x8, [], @p_u32=&(0x7f0000000000)=0x2}}) setns(0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x800, {{0x2, 0x4e23, @remote}}}, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @local}}, [0x5, 0x3, 0xb1e, 0xfffffffffffff950, 0x1c0000000000, 0x1, 0x65, 0x1, 0x3ff, 0x7, 0x100, 0x8, 0x3, 0x7ff, 0x80000001]}, &(0x7f00000001c0)=0x100) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000200)) 23:02:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x24, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 361.845931][T15215] device bond0 entered promiscuous mode [ 361.857448][T15215] device bond_slave_0 entered promiscuous mode [ 361.879908][T15215] device bond_slave_1 entered promiscuous mode 23:02:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x38, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 362.103462][ T3562] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 362.143402][ T2574] usb 5-1: new high-speed USB device number 31 using dummy_hcd 23:02:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x600, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:13 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f0000001180)) epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x10, &(0x7f0000000200)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r5, 0x9}, 0x8) ptrace(0x10, r0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080), 0x2) ptrace$getregs(0xffffffffffffffff, r0, 0x0, 0x0) [ 362.373333][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 362.393621][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 362.504321][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 362.519946][ T3562] usb 2-1: config 0 has no interface number 0 [ 362.530875][ T2574] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 362.537288][ T8917] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 362.545044][ T2574] usb 5-1: config 0 has no interface number 0 [ 362.547361][T15245] sctp: [Deprecated]: syz-executor.0 (pid 15245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.547361][T15245] Use struct sctp_sack_info instead [ 362.558026][ T2574] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 362.582422][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 362.596089][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 362.607556][ T2574] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 362.619026][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 362.630476][ T2574] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 362.642823][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 362.666089][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.689625][ T2574] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 362.702075][ T3562] usb 2-1: config 0 descriptor?? [ 362.708399][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.734631][ T2574] usb 5-1: config 0 descriptor?? [ 362.753879][T15217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 362.760946][T15217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 362.769656][T15220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 362.784047][T15220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 362.819873][ T8917] usb 3-1: Using ep0 maxpacket: 8 [ 362.943862][ T8917] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 362.954718][ T8917] usb 3-1: config 0 has no interface number 0 [ 362.997007][ T8917] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 363.092163][ T8917] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 363.134531][ T3562] usb 2-1: USB disconnect, device number 25 [ 363.151719][ T8917] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 363.204512][ T8917] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 363.247465][ T8917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.294850][ T2475] usb 5-1: USB disconnect, device number 31 [ 363.307934][ T8917] usb 3-1: config 0 descriptor?? [ 363.363730][T15234] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 363.374395][T15234] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 363.625553][ T8917] usb 3-1: USB disconnect, device number 12 23:02:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) timerfd_create(0x5, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) read$dsp(r3, &(0x7f0000002700)=""/165, 0xa5) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 23:02:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x700, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000100)={{}, {0x0, r7+30000000}}, 0x0) r8 = dup3(r5, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000000)={0x2001}) write$P9_RRENAME(r8, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) 23:02:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xb00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xf00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x2400, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 364.113216][ T17] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 364.122585][T15339] ion_buffer_destroy: buffer still mapped in the kernel [ 364.163460][ T2475] usb 5-1: new high-speed USB device number 32 using dummy_hcd 23:02:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)=@in6={0x2, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="82c2178d", 0xfc9e}], 0x1}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x2, 0x7, 0x3}, 0x95, 0x4aa}) add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) mq_open(&(0x7f0000000000)='geneve0\x00', 0x2, 0x101, &(0x7f0000000100)={0x0, 0x0, 0x4b3, 0x200}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2001}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xc0c0c0c0}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'geneve0\x00'}}, 0x1e) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x19, 0x0, 0xffffffffffffffff}) dup(r3) 23:02:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3800, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001f00050ad25a80648c63940d0224fc6004000f400a0003003400000037153e370a000280c02e0000d1bd", 0x2e}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xff, 0x2}, 'port0\x00', 0x0, 0x80808, 0x81, 0x6, 0x9, 0x8, 0x9, 0x0, 0x7117f90efc12afae, 0x3}) 23:02:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5}, 0x8) [ 364.278454][T15369] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 364.304824][T15369] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 364.353615][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 364.403210][ T2475] usb 5-1: Using ep0 maxpacket: 8 [ 364.476757][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 364.491748][ T17] usb 2-1: config 0 has no interface number 0 [ 364.515687][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 364.528630][ T2475] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 364.542327][ T2475] usb 5-1: config 0 has no interface number 0 [ 364.564223][ T2475] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 364.583545][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 364.614700][ T2475] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 364.630880][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 364.659802][ T2475] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 364.682920][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 364.727125][ T2475] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 364.741909][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.789150][ T2475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.802333][ T17] usb 2-1: config 0 descriptor?? [ 364.847932][ T2475] usb 5-1: config 0 descriptor?? [ 364.863732][T15343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 364.870990][T15343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 364.879672][T15349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 364.896066][T15349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 365.129569][ T17] usb 5-1: USB disconnect, device number 32 [ 365.160971][ T2475] usb 2-1: USB disconnect, device number 26 23:02:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0xa, 0x80000040) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x800}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r2 = socket$inet(0x11, 0x0, 0xa8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240), 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 23:02:17 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) 23:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x400200, 0x28) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x200000000400200) ftruncate(r3, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 23:02:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xffff, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 366.083256][ T2475] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 366.133968][ T8725] usb 5-1: new high-speed USB device number 33 using dummy_hcd 23:02:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 366.338501][ T2475] usb 2-1: Using ep0 maxpacket: 8 [ 366.404068][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 366.457076][ T3562] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 366.473578][ T2475] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.485735][ T2475] usb 2-1: config 0 has no interface number 0 [ 366.505862][ T2475] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 366.518648][ T2475] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 366.530019][ T8725] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.539233][ T8725] usb 5-1: config 0 has no interface number 0 [ 366.545851][ T8725] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 366.557434][ T2475] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 366.567686][ T2475] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 366.577234][ T8725] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 366.587461][ T2475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.595779][ T8725] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 366.616471][ T2475] usb 2-1: config 0 descriptor?? [ 366.625158][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 366.649352][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.658939][T15455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 366.667509][T15455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 366.694615][ T8725] usb 5-1: config 0 descriptor?? [ 366.714599][T15460] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 366.721932][T15460] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 366.736481][ T3562] usb 4-1: Using ep0 maxpacket: 8 [ 366.874010][ T3562] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.882038][ T3562] usb 4-1: config 0 has no interface number 0 [ 366.928634][ T3562] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 366.933331][ T2475] usb 2-1: USB disconnect, device number 27 [ 366.993827][ T3562] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 367.027333][ T8725] usb 5-1: USB disconnect, device number 33 [ 367.101954][ T3562] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 367.164252][ T3562] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 367.200025][ T3562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.235826][ T3562] usb 4-1: config 0 descriptor?? [ 367.264491][T15478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 367.271838][T15478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 367.514314][ T2475] usb 4-1: USB disconnect, device number 6 23:02:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:18 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x300) clone(0x2000100, &(0x7f0000000080)="0aec1cbeebe22212eede1755342b7c76ea11d1a60f59cf513d40724b47b0b3b14b5e592a20", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="56cfc2e8a21d5e842ea5a13a08634b3c2175f097df2d6e55577cc3c3a7a7b3d095f46d778043557e04b7fe388660b62e3f5dd9fcbeea5f842e79c11a40fb4910bf79cf629e44920f3974ec9d7410d1cae557478977707d756f") openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x6000, 0x0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) ioctl$TCFLSH(r4, 0x540b, 0x1) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x40002002}) write$UHID_CREATE(r7, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000001c0)=""/205, 0xcd, 0x7, 0x9, 0x7, 0x10001, 0x6}}, 0x120) 23:02:18 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400000000fbdbdf25fee600000000", @ANYRES32=0x0, @ANYBLOB="80030000000000001800128008000100767469000c000280080004007f000001"], 0x38}}, 0x0) 23:02:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 367.656215][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:18 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 367.700245][T15606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f0000000100)={{}, {0x0, r8+30000000}}, 0x0) r9 = dup3(r6, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f0000000000)={0x2001}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xdfe466c94ae55a77, 0x4000010, r9, 0x10000000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r10 = accept4(r3, 0x0, 0x0, 0x400) sendmmsg$sock(r10, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x4}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0xfb80}], 0x1}}], 0x2, 0x24004880) 23:02:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 367.933114][ T8725] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 367.963000][ T3562] usb 2-1: new high-speed USB device number 28 using dummy_hcd 23:02:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYRES16=r7, @ANYBLOB="000000000000060000000200000006000b002600000008000700ac1e000108000800e000"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'y(3{]{]#-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x64}}, 0x0) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 23:02:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xf, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 368.192982][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 368.232965][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 368.317991][ T8725] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 368.332951][ T8725] usb 5-1: config 0 has no interface number 0 [ 368.339641][ T8725] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 368.362941][ T8725] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 368.382902][ T8725] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 368.383386][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 368.392674][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 368.392696][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.422519][ T3562] usb 2-1: config 0 has no interface number 0 [ 368.424614][ T8725] usb 5-1: config 0 descriptor?? [ 368.454500][T15602] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 368.462011][T15602] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 368.462907][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 368.502870][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 368.532933][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 368.552934][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 368.562007][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.591920][ T3562] usb 2-1: config 0 descriptor?? [ 368.634096][T15603] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 368.641055][T15603] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 368.707540][ T8725] usb 5-1: USB disconnect, device number 34 [ 368.908649][ T3562] usb 2-1: USB disconnect, device number 28 23:02:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:20 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, r4+30000000}}, 0x0) r5 = dup3(r2, r1, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x1, 0x6}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000000)={0x2001}) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000001ac0)=ANY=[@ANYBLOB="aea70102038109023400020000000886acff0d2e2fb6580009058e03000000000007058fba5d99da09050f020000000000090500000000000000"], 0x0) 23:02:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1fffffff5ee8e848f2c0628000000000a0001006e6574656d0000001c000200"/60], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) 23:02:20 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x24, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 369.357674][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r8+30000000}}, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f0000000000)={0x2001}) ioctl$DRM_IOCTL_MODESET_CTL(r9, 0x40086408, &(0x7f0000000040)={0xbb7, 0x400}) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:02:20 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x38, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 369.400559][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.428965][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.453207][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:20 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:20 executing program 3: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:02:20 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 369.663488][ T2574] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 369.663510][ T17] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 369.803685][ T3583] usb 2-1: new high-speed USB device number 29 using dummy_hcd 23:02:21 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 369.851904][T15733] device bridge1 entered promiscuous mode [ 369.896396][ T3562] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 369.943681][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 369.982950][ T2574] usb 3-1: device descriptor read/64, error 18 [ 370.062890][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 370.063484][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.084585][ T17] usb 5-1: config 0 has no interface number 0 [ 370.091167][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 370.111614][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 370.122166][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 370.139179][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 370.148654][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.163720][ T3562] usb 1-1: Using ep0 maxpacket: 8 [ 370.165634][ T17] usb 5-1: config 0 descriptor?? [ 370.194351][T15701] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.201656][T15701] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.213378][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.221628][ T3583] usb 2-1: config 0 has no interface number 0 [ 370.252064][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 370.301124][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 370.312366][ T3562] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.333275][ T3562] usb 1-1: config 0 has no interface number 0 [ 370.360132][ T3562] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 370.377054][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 370.407148][ T3562] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 370.419490][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 370.429610][ T2574] usb 3-1: device descriptor read/64, error 18 [ 370.450336][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.455843][ T17] usb 5-1: USB disconnect, device number 35 [ 370.464684][ T3562] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 370.505339][ T3583] usb 2-1: config 0 descriptor?? [ 370.510980][ T3562] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 370.538871][ T3562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.557710][T15718] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.574697][T15718] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.612937][ T3562] usb 1-1: config 0 descriptor?? [ 370.643578][T15728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.650603][T15728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.723197][ T2574] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 370.823026][ T3562] usb 2-1: USB disconnect, device number 29 [ 371.006720][ T2574] usb 3-1: device descriptor read/64, error 18 [ 371.014520][ T17] usb 1-1: USB disconnect, device number 15 23:02:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 371.406154][ T8725] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 371.462976][ T2574] usb 3-1: device descriptor read/64, error 18 [ 371.583030][ T2574] usb usb3-port1: attempt power cycle [ 371.652717][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 371.772813][ T8725] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 371.780948][ T8725] usb 5-1: config 0 has no interface number 0 [ 371.787314][ T8725] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 371.800323][ T8725] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 371.810341][ T8725] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 371.820193][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 371.829353][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.838946][ T8725] usb 5-1: config 0 descriptor?? [ 371.866251][T15831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 371.881607][T15831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 372.115537][ T8725] usb 5-1: USB disconnect, device number 36 23:02:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup(r0) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="22000000020049e1356b631140ae51968e51461663030f1a3c26977ca8794cfbac106d3e94df5f65fb2fc914e2c93ef5a0620d62d55801cbc5c335565d36cb43aa0cc49309efdf9625acdd424ffe069f9879524a40c0f87ad2f9026dcce0f13144e0d72113ce72277625afe8b6877e88471c3e725595545368c06538b28466abafb781a5e4957ccb32ac2acb"]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xff7cff40f825d397}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) close(r2) 23:02:23 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:23 executing program 3: creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) setns(r1, 0x20000000) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 23:02:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:23 executing program 0: r0 = socket(0x8, 0x3, 0xff) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x423, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002009abb0b526f510ef033358729fffe67871e8ce33436d7b5bd552772915d0204ef81182050659e16ffeaa44668e47dff4a7edcbd6c9dd79b2544329f3b7b10ab61db8bdb0eda7c2d1458b4d6790df759416b67c992d09ff3a7b97c6bd1a65e595660d78455503f1d08b3c793bd1649105af2ac81375e14a88bdec7c0a5755e634a1079c7d535e81d8b286932e41cb9fbe179e0c88060a43b3a6d7828bfdaec05d635e2410f60eb95d892453bdfd2f1969326316db75246145b4d98125174ab392937ccecec6b4dc994312014cf2591febf90d72ceeb238ec87f1f360c3c17e8c870b765f611dc758aa270a7b32a68f16171286c81cd0b5f8e650dc6eccd398d5efd5edf136f14001a21e06e337247cc987ac68b796ac6d2ff766ed8353a363832f1d3fa908fa20132334f65b3c53db4be4b91ec29172b03b7e5fd7ea98eb82f2637eb32dcc2e829687eb3471bffe6e03e5e8c6fb94cfba39f8615bbfa1909f24"], 0x34}}, 0x0) [ 372.302756][ T2574] usb 3-1: new high-speed USB device number 15 using dummy_hcd 23:02:23 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 372.422842][ T2574] usb 3-1: device descriptor read/8, error -71 23:02:23 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0), 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000400)=""/127}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000bc0)={0x80600, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0xd}, &(0x7f00000009c0)=""/166, 0xa6, &(0x7f0000000a80)=""/144, &(0x7f0000000b40)=[r0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0], 0x8}, 0x58) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)=""/198, 0xc6}, {0x0}], 0x3}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000006c0)={0x20, 0x22, 0xdf, {0xdf, 0x21, "9d5e9a51f3bcf2a95b33bfec24f8944f2e4de04c6469a0523760caf006e47aa1093e4e5851372bbfcf3982ecfd84800e0aa15cd32cca285f569d72c270067081924424e696614611ab30802540acfd46c9f13bb0f7a0a40a3c5868962ea343f96fa3f7963abde19f29cbb4ba8e2596d0010cce11f55ab6ff8c5b6b78a8c358740c68e8a49b632a2bdf145fbdf46ca47d4763f718302f31a3daab3b041fc9bc22fb1f82be15776f999c262f67b63eee85fc6ae4284d5b113fb79a5453c5093c22c910fd11836ce74ca3736be377e1e97a97ac55dc08e3dcfd11183d1335"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000c40)=ANY=[@ANYBLOB="00107100000027d5eb8bd0f95c323f492f903e9eb687fff59fabb9fa313f776c2e99d30cad21437bcc6dbda30eb476141b636fe8effdd5b915bcf52809216608737510fe98a0a8d7dcd2bbfee1df0ee4c8353d00db398df9e35763fa95b747b476328f33373ae373e5a00b16486b58501f390ed9386be00427252e2771672d3760bc4da361bf2a79205f99211a3d7bd753f461928b30b9b4cf41176affab7640fba8de6ed67c5313d2283a90903245512b5d1a19585a0cbcd3a3cc9e6aa4d90cf5581972aecb1f74756bedb2391de06f"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xb3}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0x2, 0xa1, 0x100, 0x8001, 0x8a, 0x8, 0x2b7f, 0x0, 0x1, 0x0, 0x1, 0xd7b}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x24a8f6cd) 23:02:23 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:23 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 372.632926][ T2574] usb 3-1: device descriptor read/8, error -71 [ 372.672708][ T3571] usb 2-1: new high-speed USB device number 30 using dummy_hcd 23:02:24 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:24 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 372.952702][ T3571] usb 2-1: Using ep0 maxpacket: 8 [ 373.013274][ T17] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 373.092919][ T3571] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.110301][ T3571] usb 2-1: config 0 has no interface number 0 [ 373.126810][ T3571] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 373.138860][ T3571] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 373.149940][ T3571] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 373.160967][ T3571] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 373.171089][ T3571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.209148][ T3571] usb 2-1: config 0 descriptor?? [ 373.252246][T15913] IPVS: ftp: loaded support on port[0] = 21 [ 373.262671][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 373.262957][T15881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.284331][T15881] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_ADDRESS={0xa, 0x1, @random="dfc107bbd307"}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x48}}, 0x0) 23:02:24 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b650000a36f100002000c0008000000000000000000"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x40041) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 373.383511][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.399427][ T17] usb 5-1: config 0 has no interface number 0 [ 373.412919][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 373.476423][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 373.491989][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 373.497424][ T3571] usb 2-1: USB disconnect, device number 30 [ 373.515549][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 373.548039][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.574735][ T17] usb 5-1: config 0 descriptor?? [ 373.593952][T15901] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.601760][T15901] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.849510][ T17] usb 5-1: USB disconnect, device number 37 23:02:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 374.267411][T15952] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 374.406797][T15994] IPVS: ftp: loaded support on port[0] = 21 [ 374.422689][ T2475] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 374.664407][ T2475] usb 2-1: Using ep0 maxpacket: 8 [ 374.712883][T14156] tipc: TX() has been purged, node left! [ 374.782859][ T2475] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 374.791057][ T2475] usb 2-1: config 0 has no interface number 0 [ 374.804143][ T2475] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 374.820156][ T2475] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 374.840916][ T2475] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 374.850985][ T2475] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 374.860383][ T2475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.869766][ T2475] usb 2-1: config 0 descriptor?? [ 374.892940][T16009] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.901294][T16009] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 375.158249][ T2475] usb 2-1: USB disconnect, device number 31 23:02:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0"], 0x1) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000180)=""/166, 0xa6) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 23:02:27 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000041c3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}}, 0xe8) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "5f683fee", {0x1, 0x1000, 0x9, 0x4, 0x1f}}) 23:02:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:27 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:27 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:27 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) r7 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x40, 0x2a, 0x2, 0x80, 0x0, 0x1ff, 0x1560, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3}, 0x1000, 0x85, 0x100000, 0x8, 0x4, 0x6, 0xe5}, r0, 0xc, r6, 0x0) dup2(0xffffffffffffffff, r7) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f6000000010902120001000000000904"], 0x0) 23:02:28 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x8, 0x6, 0x200}) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000), 0x4) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x10000, 0x45cd44aa, 0x8, 0x7e030}}) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", 'M\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 23:02:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 376.873218][ T3571] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 376.882350][ T8917] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 376.904165][ T3583] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 376.932882][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:02:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 377.132545][ T8917] usb 2-1: Using ep0 maxpacket: 8 [ 377.162418][ T3571] usb 5-1: Using ep0 maxpacket: 8 [ 377.167694][ T3583] usb 1-1: Using ep0 maxpacket: 8 [ 377.244724][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 377.259329][ T8917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 377.299340][ T3583] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 377.304176][ T8917] usb 2-1: config 0 has no interface number 0 [ 377.308190][ T3571] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 377.336697][ T3583] usb 1-1: config 0 has no interface number 0 [ 377.344430][ T8917] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 377.362059][ T3583] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 377.365153][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 377.381212][ T3571] usb 5-1: config 0 has no interface number 0 [ 377.399660][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 377.402844][ T3571] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 377.411186][ T8917] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 377.430535][ T8917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.430674][ T3583] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 377.446486][ T8917] usb 2-1: config 0 descriptor?? [ 377.472903][T16082] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.475525][ T3571] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 377.481681][T16082] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.493776][ T3583] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 377.514253][ T3571] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 377.526509][ T3583] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 377.536659][ T3571] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 377.547012][ T3583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.556176][ T3571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.566690][ T3583] usb 1-1: config 0 descriptor?? [ 377.583094][T16086] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.594500][ T3571] usb 5-1: config 0 descriptor?? [ 377.601138][T16086] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.633860][T16080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.641206][T16080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.856597][ T8917] usb 2-1: USB disconnect, device number 32 [ 377.881864][ T3583] usb 5-1: USB disconnect, device number 38 [ 378.138923][ T3571] usb 1-1: USB disconnect, device number 16 23:02:30 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f0000000300)=[{}, {}, {}, {}], 0x3, 0xfffffffffffffff7, 0x0, 0xfdbc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f00008a7000/0x1000)=nil, &(0x7f000056f000/0x2000)=nil, &(0x7f000098d000/0x1000)=nil, &(0x7f0000362000/0x3000)=nil, &(0x7f0000740000/0x3000)=nil, &(0x7f0000770000/0x3000)=nil, &(0x7f0000a5a000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000a1000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000003c0)="d551abf91365b454b1", 0x9, r0}, 0x68) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x511080, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000100)={{}, {0x0, r4+30000000}}, 0x0) r6 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000000)={0x2001}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000180)="41929e10cf2802aca93b71408cc98f0affeda48e2e5d1fdd8d3c1254109124a51fbe49e8e128cef4560994afae6380a50d32498bfd64add14020620e003efe31bf73cc8c15169592fe06929f3b7612505f5283d4b92301a48703db63b8d2e297dc6b167ef119cf73922d92ce0adf4aebaa522b3f3238ac7138ff7146db20bedcacb9b272609f288eef892b4c2a562364f8e46e5c7d834eabf1ce86a00be3442a57a64b34f03e1d9d85d9be4d7a3b37f5ebcce4b3d29c6acfde660938d00a", &(0x7f0000000040)=""/78, &(0x7f0000000500)="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", &(0x7f0000000240)="61c1ec8f5b95d9eba720d005eddf08f327391af32be61c2c32176b2c7748d6ddd7bed62ce7f2e072a76237b75f10f010b77d551dbb371cef80075202df8d6d0858ca57ec4b8ea862e29e810932da6cb688d2652b8291a96e6fd1bb51a78adf0f885a9d39f22a277a81552c8036f07adec95b70072f5be0c10ecb3633ffc08c450a3c239968dec57b5a89f4f3", 0x8000, r6}, 0x38) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r8, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000009, 0x2759, 0xd, 0x0, 0x0, r7, &(0x7f0000000000)="98", 0x3e80000039}]) 23:02:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x3f, 0x9, 0x8, 0x0, 0x80000001, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2ca103, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a683059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_uring_setup(0xff4, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x51}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e20}}]}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x5}, 0x1) ioctl$FIOCLEX(r1, 0x5451) 23:02:30 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x8, 0x6, 0x200}) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000), 0x4) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x10000, 0x45cd44aa, 0x8, 0x7e030}}) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", 'M\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 23:02:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 378.911875][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:02:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000003c0)="64660f3880a7000000000f00589d66b8aa008ec8ea7b9e93222f0066b836008ed0b9800000c00f323500800000f26fd8c70f0d27362e660f3881492fb805000000b9000000800f01c1", 0x49}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$tipc(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x0, 0x2, 0x1000, 0x7ff, 'syz0\x00', 0x8}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.092422][ T8725] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 379.122708][ T8917] usb 5-1: new high-speed USB device number 39 using dummy_hcd 23:02:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 379.352450][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 379.392741][ T8917] usb 5-1: Using ep0 maxpacket: 8 [ 379.472721][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 379.480755][ T8725] usb 2-1: config 0 has no interface number 0 23:02:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 379.523026][ T8917] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 379.531057][ T8917] usb 5-1: config 0 has no interface number 0 [ 379.546440][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 379.581968][ T8917] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 379.613914][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 379.680754][ T8917] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 379.710959][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 23:02:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 379.742218][ T8917] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 379.760747][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 379.785716][ T8917] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 379.801923][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.832196][ T8917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.852457][ T8725] usb 2-1: config 0 descriptor?? [ 379.878383][ T8917] usb 5-1: config 0 descriptor?? [ 379.892633][T16217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 379.908169][T16217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 379.933764][T16223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 379.941739][T16223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 380.179105][ T8917] usb 2-1: USB disconnect, device number 33 [ 380.259552][ T3571] usb 5-1: USB disconnect, device number 39 23:02:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xf, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:32 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7fffffff, 0x10f003) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x2}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 23:02:32 executing program 2: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x1, r0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000540)="06", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r4, r2}, &(0x7f0000000400)=""/256, 0x100, &(0x7f0000000240)={&(0x7f0000000080)={'sha1_mb\x00'}}) 23:02:32 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x123a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0x0, 0x1, 'macsec\x00'}, {0x0, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0x0, 0x1, 0x862c}, @IFLA_MACSEC_REPLAY_PROTECT={0x0, 0xc, 0x5}, @IFLA_MACSEC_PROTECT={0x0, 0x8, 0x5}, @IFLA_MACSEC_ICV_LEN={0x0, 0x3, 0x5}, @IFLA_MACSEC_ES={0x0, 0xa, 0x1}, @IFLA_MACSEC_ICV_LEN={0x0, 0x3, 0x4}]}}}]}, 0xf0}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x2001}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={@private2, 0x1b, r8}) 23:02:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x24, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 380.949462][T16339] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x38, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 381.072324][ T8917] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 381.096466][T16334] could not allocate digest TFM handle sha1_mb 23:02:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 381.312137][ T8917] usb 2-1: Using ep0 maxpacket: 8 23:02:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local={0xac, 0x38}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 381.432353][ T8917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 381.450082][ T8917] usb 2-1: config 0 has no interface number 0 [ 381.477236][ T8917] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 381.534689][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 23:02:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local={0xac, 0x14, 0x38}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:32 executing program 3: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='/dev/btrfs-control\x00', &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) epoll_create1(0x0) epoll_create1(0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="219513dbe1f315617204a6eece230c81c8bb349eaba8e7aedd89253468fb45cfb8d1121e6cfcff57573a8b51be56dc2b32658da25887bda59a3797a98aece445fa64691891bb34aa23f728b1a6dcf8225a861655c21d1146ac077db9ede08e0ef73a2b9d00f712f287dcc155d2def68aa423ccec8be03574db6b", @ANYRES32], 0x2c2d) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x17d, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 23:02:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 381.624644][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 381.670027][ T8917] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 381.704277][T16362] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:33 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 381.728191][ T8917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.743885][ T8917] usb 2-1: config 0 descriptor?? [ 381.762489][T16327] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)) [ 381.774157][T16327] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 381.905966][T16380] binder: 16371:16380 ioctl c018620c 20000080 returned -22 [ 381.944321][T16384] binder: 16371:16384 ioctl c018620c 20000080 returned -22 [ 382.029047][ T8917] usb 2-1: USB disconnect, device number 34 23:02:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:33 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) fallocate(r2, 0x100000003, 0x0, 0x8001) 23:02:33 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r0 = epoll_create1(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000000062f6e9a5d02bf5de58aeef00"/28, @ANYRES16=r1, @ANYBLOB="01002ebdf927bd7000fbdbdf2501000000080001000300000008000200010000000cc90b800504030005000000080002000200000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6a19119ba4295bc2b02a0b00dc73b8fe70da3f", @ANYRES16=r1, @ANYBLOB="0101000000000000df25040000000800010000000000080002000000ac7417ff6fbafb6a69dbc63e4ec8dde4000008000100ffffffff080002000200000004000880f8000c8034000b8008000a002d97000008000a000497000008000a000000000008000900b54e39620800090068c9595c08000a00cff9000004000b802c000b8008000900c67cb80f080009001698673408020a00940e000008000a00e40a000720000044000b80080009005dcbf63308000a000000000008000a00a020000008000900d941057c08000a00544a000008000900995d073908000a00e7860000080009000f865a1a2c000b80080009006ceaa270080009005fd48257080009007bdd540308000a0061020000080009004c0d3c0814000b8008000a0086f9000008000900001319c8e6000b8008000a003d74000008000200030000001c000480050003000700000005000300070000000500030004000000"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0061a9002200f4f071e690521d79ec2df20a1921292b81a9ff0700001853f6caa7bee88f97c39fa1a81e3bdd3b2a22728650938e7081aa8a", @ANYRES16=r1, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b00100ff", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r1, @ANYBLOB="200027bd7000fcdbdf2502000000180108802c0007800800050061acf22408000600cc00000008000500491afe3308000500aebc2227080006004400000024000780080006008b0000000800060070000000080005000ba0b21f08000600740000003c00078008000600630000000800050092e45d0308000500789ae7540800050000f9e24b08000600db0000000800060084000000080005009705d052140007800800050052113c4508000500d1507e7d340007800800060090000000080006005300000008000500ac4e2b6808000500216a585408000500f720fa4408000500f7906e4e1c0007800800050089badb79080005008e3c177008000600c700000024000780080005008df06d1f080006000500000008000500b5153d7008000600ed0000002c0004000300010000000500030000000000050003000000000005000300050000004c000880140007800800050040fd4d45080005007303640c3400078008000500c485fd250800060069000000080006009b00000008000600240000000800060002000000080005006e8f684e"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000c674ad4f8cf84155cbf7a11cbec15b1ddccbf3f0ef01672520d8936516e364f8", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf25020000002800088024000780080006003300000008000500320e107908000600dc000000080005009b1219360800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x668f457}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40000000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d628664}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4525ca63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6249f89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x255c9a5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ef6c208}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47d1f37f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca76e0d}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x5}, 0x8800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00000003c0)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000080)={0x5, {0x0, 0x0, 0x6cfa}, {0x80001, 0x5, 0x0, 0x4f7}, {0x1, 0x8}}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x68ac80) pwritev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="5a98ec2d8321baf2985b21a6616888d62da3d905eb5e1c1e34c59ea24fffd8cec941b56c276fe404294d8548153802da68bdab4594", 0x35}], 0x1, 0x6) 23:02:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:33 executing program 3: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='/dev/btrfs-control\x00', &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) epoll_create1(0x0) epoll_create1(0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="219513dbe1f315617204a6eece230c81c8bb349eaba8e7aedd89253468fb45cfb8d1121e6cfcff57573a8b51be56dc2b32658da25887bda59a3797a98aece445fa64691891bb34aa23f728b1a6dcf8225a861655c21d1146ac077db9ede08e0ef73a2b9d00f712f287dcc155d2def68aa423ccec8be03574db6b", @ANYRES32], 0x2c2d) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x17d, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 23:02:33 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 23:02:33 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x6, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:34 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x8, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:34 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 382.952067][ T8917] usb 2-1: new high-speed USB device number 35 using dummy_hcd 23:02:34 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 383.202212][ T8917] usb 2-1: Using ep0 maxpacket: 8 [ 383.322246][ T8917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 383.340010][ T8917] usb 2-1: config 0 has no interface number 0 [ 383.362803][ T8917] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 383.387695][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 383.420862][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 383.452641][ T8917] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 383.476960][ T8917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.511352][ T8917] usb 2-1: config 0 descriptor?? [ 383.542439][T16418] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 383.558775][T16418] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 383.682011][ T8725] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 383.807849][ T3571] usb 2-1: USB disconnect, device number 35 [ 383.960370][ T8725] usb 5-1: device descriptor read/64, error 18 23:02:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x280, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 23:02:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000300000000000000", 0x58}], 0x1) [ 384.361946][ T8725] usb 5-1: device descriptor read/64, error 18 [ 384.364541][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:02:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 384.419560][T16486] device bridge2 entered promiscuous mode [ 384.458606][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 384.506767][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 384.544310][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:02:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000000), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x200, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001d00)={[0x8, 0x1ff, 0x8, 0x5, 0xc46d, 0x5, 0x5, 0x7, 0x7fff, 0x0, 0x1ff, 0x0, 0x8, 0x8, 0x9, 0xcd09, 0xcb05, 0x8001, 0xffffffff, 0x101, 0x3ff, 0x7f, 0xf1, 0x401, 0xffff, 0x2, 0x1000, 0x99fd, 0xda, 0xeb6, 0x7, 0x3, 0x5, 0x10000, 0x7fffffff, 0x3, 0x3, 0x5, 0xffff, 0xdf7, 0x0, 0x3, 0x200, 0x8001, 0xac, 0x9, 0x7, 0x3, 0xfffffffd, 0x5, 0x40000, 0x1, 0x40, 0xffffffff, 0xfffffff9, 0x6, 0x6, 0x0, 0x0, 0xf9, 0x9cc, 0x8, 0x7, 0x3f, 0x9, 0x1f, 0x39, 0x2, 0x5, 0x5, 0x7, 0x20, 0x3, 0x401, 0x2, 0x3, 0x9, 0x3, 0xfff, 0x8001, 0x7, 0x0, 0xfff, 0x0, 0x7fffffff, 0x8001, 0x1, 0x4bd2, 0x200, 0x80, 0x3726, 0x635377ec, 0x1f, 0x6, 0x10001, 0x1, 0x2a, 0xfa75, 0x5, 0x0, 0x1f, 0x44a, 0x1, 0x6, 0x3, 0x5, 0x7e0000, 0x7fff, 0x8, 0x101, 0xb0db, 0x6, 0x10000, 0x0, 0xbe4, 0x7f, 0x9, 0xffffffff, 0x5, 0x1000, 0x6e6, 0x9, 0x0, 0x9, 0x7, 0x101, 0xd9, 0xfff, 0x28c8, 0x4, 0x9, 0x92f2, 0x401, 0x9, 0x3c, 0x7f, 0x2, 0x401, 0x170d, 0x5, 0x200, 0x1ff, 0x2, 0x8, 0x8f, 0x1f, 0xf1, 0x100, 0x200, 0x3, 0x8001, 0xffffffff, 0x678, 0x6, 0x200, 0x4, 0x2, 0x22, 0x6, 0x1, 0x6, 0x6ce2, 0x7f, 0xf814, 0x4, 0x0, 0x5, 0x9, 0xe77, 0x0, 0x0, 0x6, 0x3f, 0x6, 0x81, 0x80000001, 0x5, 0x80000001, 0x3c38, 0x9be, 0x0, 0x0, 0x0, 0xf6, 0xa5, 0x2, 0x2, 0x34f, 0xffffffff, 0x801, 0x8ddf, 0xca, 0x8, 0x81, 0xffffff81, 0x7fff, 0xffffffff, 0x7, 0x1, 0x18d3, 0x9, 0x0, 0x1, 0x4, 0x2, 0x2, 0x6, 0x2, 0xffff, 0x6, 0x6f, 0x7fff, 0x6, 0x2, 0x4, 0x1, 0x1f, 0x20, 0x2, 0x2, 0x3, 0x3, 0x320, 0x8, 0x6, 0x9, 0x7ff, 0x6, 0x2, 0x7ff, 0x7, 0x1, 0x101, 0x7, 0x4, 0x6, 0x1, 0x3ff, 0x200, 0xfffffffa, 0x10001, 0x6, 0xf7e, 0x1, 0x1, 0x4, 0x200, 0x0, 0x4, 0x2, 0x62f3, 0xff, 0x10000, 0x8, 0xfff, 0x2, 0x3f, 0xfff, 0xfff, 0x7, 0x1f, 0x100, 0x6, 0x9, 0x5, 0x7fffffff, 0x1453437e, 0x2, 0x7fff, 0x7, 0x6, 0x1, 0xdf4, 0x2, 0x6, 0x5, 0x3, 0x1, 0x0, 0x2, 0x20, 0x4, 0x4, 0x1, 0x5, 0x3528, 0x5, 0x7, 0x1, 0x20, 0xc53, 0x5, 0x81, 0x0, 0x6, 0x4ff8, 0x1, 0x7, 0xff, 0x2, 0xffffffc1, 0x200, 0x101, 0x6, 0xffffffff, 0x0, 0xc3, 0x0, 0x7ff, 0xffffffff, 0x4, 0x80, 0x8, 0x8, 0xffffffff, 0x80000001, 0x65, 0x4, 0x5, 0x101, 0xa, 0x3, 0xfffffff7, 0x2, 0xda8, 0xde6f, 0xe5, 0x8, 0x4, 0x2, 0xd6c3, 0x8, 0x1, 0x7, 0x3, 0x35, 0x7, 0x7, 0x200, 0x5, 0x6, 0x8, 0x8, 0x5, 0x11, 0x2, 0x2, 0x5, 0xbe, 0x80000000, 0x8001, 0x6, 0x0, 0x8001, 0x1, 0x8, 0x400, 0xfff, 0xe918, 0x52, 0x3, 0x7b4, 0x1, 0xa5, 0x3, 0x0, 0x2, 0xa62, 0x2, 0x0, 0xdb96, 0xfffffff8, 0x3, 0xcc07, 0x1f, 0x5, 0x511, 0x3, 0x8, 0x3, 0xb7, 0x72a, 0x3, 0x7, 0x401, 0xb67, 0x10000000, 0x8, 0x3, 0xffffffff, 0x200, 0x0, 0x10000, 0x5, 0xc203, 0x0, 0x2, 0x1, 0x5cbb, 0x20, 0x2, 0x801, 0x0, 0x87, 0x101, 0x0, 0x1f, 0x10001, 0x7fffffff, 0x20, 0x8, 0x4, 0x0, 0x8, 0x9, 0x0, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0x1, 0xc2ae, 0x1f, 0x8209, 0x1, 0x3f, 0x2, 0x3, 0xfffff001, 0x3356, 0x2, 0x7, 0xffffffff, 0xffff310e, 0x2, 0x57, 0x3, 0x3ff, 0x6, 0x2, 0x5, 0x10000, 0x8000, 0x8, 0xfffffff9, 0x200, 0x9, 0xffff910b, 0x2e6, 0x800, 0x4, 0x9, 0x2, 0x3, 0x5, 0x2, 0x1ff, 0x1, 0x3ff, 0x2, 0x40, 0x7, 0xffff8001, 0x1, 0xba, 0x3, 0x3, 0x8, 0x81, 0xf10, 0xa5a, 0x1ff, 0x8001, 0x2, 0x5, 0x7fffffff, 0x2, 0x6, 0x9, 0x9, 0x8, 0x3, 0x8, 0x92c, 0x5, 0x80000001, 0x6, 0x9, 0x2, 0x1, 0x8, 0x3, 0x7, 0x5, 0x7ff, 0x2, 0x3, 0x1000, 0x3, 0x3, 0x7, 0x3, 0x400, 0x7fffffff, 0x10000, 0x5, 0x80000001, 0x8, 0xfffffffc, 0xb99e, 0x200, 0x7, 0x1ff, 0x3ff, 0x3ff, 0x7f, 0xee, 0x7, 0x40, 0xb1, 0xb61, 0x20, 0x5, 0x6, 0x10001, 0x7, 0x0, 0x5, 0x3, 0x1, 0x0, 0x4, 0x81, 0x3, 0x2, 0x7, 0x110, 0x81, 0x0, 0x50ae, 0x6, 0x0, 0x53f9, 0x0, 0x4, 0x6, 0xe9, 0x2, 0xfffffff8, 0x6, 0x6f, 0x1, 0x8001, 0x9, 0x7f, 0x1, 0x6, 0x8, 0x800, 0x80, 0x8, 0xbf8, 0x8262, 0x4, 0x4, 0x7, 0x6, 0x0, 0x6, 0x8, 0x3, 0xffffffff, 0x1, 0x1, 0x4, 0x6, 0x1f, 0x4, 0x800, 0x5, 0x6, 0x3, 0x3, 0x9b9, 0x1000, 0x1, 0xffff, 0x1, 0xf2a, 0x4, 0xfffffffb, 0x0, 0xd89, 0x5, 0x5, 0x3, 0x3, 0x9, 0xffff78d8, 0x8, 0x1, 0x3, 0x5, 0x3, 0x5, 0x8, 0x80000000, 0x200, 0x79, 0x0, 0x5, 0x4e38, 0x2, 0xf09, 0x7ff, 0x7, 0xffff, 0x3654, 0x7, 0x7, 0x80000001, 0x2, 0xcf, 0x8, 0x2, 0x59ad, 0x2, 0x5, 0x400, 0x8, 0xcbfee36, 0x4, 0xffffff15, 0xffffffff, 0x4, 0xb0, 0x5, 0x2, 0x3, 0xfffffffe, 0x1, 0x80, 0x8, 0xc, 0x1, 0x80000001, 0x9, 0x1, 0x2, 0x7ff, 0x8, 0xb90, 0xa7e, 0x10001, 0x7b, 0x4, 0x5be9, 0x1, 0xfffffffd, 0x5, 0x9, 0xff, 0xddb3, 0x8, 0x56e0, 0x7, 0x8, 0x3f, 0x4, 0x1000, 0x7ff, 0x8, 0x8, 0x8, 0x400, 0x4, 0xffff9960, 0x3, 0x8, 0x6, 0x8001, 0xfffffffb, 0xc28, 0x2, 0x9, 0x2, 0x6, 0x0, 0x8640, 0x2, 0x5, 0xf0ba, 0xfff, 0x20, 0x3, 0xbfe2, 0xec, 0x4, 0x2, 0x5d21, 0x3, 0x4, 0x1ff, 0x80000000, 0x5b, 0xbc96, 0x3, 0x8001, 0x7, 0xfffffff8, 0x3f, 0x1, 0x400, 0x558, 0x10001, 0x9, 0x101, 0x81, 0xb05f, 0x1, 0x8, 0x40000000, 0x4, 0x1, 0x0, 0xfffffff9, 0x4, 0x7, 0x7bf, 0x401, 0x7ff, 0x81, 0x80000001, 0x6, 0x6, 0x8, 0x3, 0x4, 0x1000, 0x2, 0x9107, 0x0, 0x487, 0x7ff, 0x3f, 0x9, 0x3, 0x401, 0xf1, 0x4, 0x9, 0x3ff, 0x6, 0x45c, 0x8001, 0x5, 0x53e770e7, 0x8, 0x1000, 0x7, 0x3, 0x2911c0d7, 0x80000000, 0x854, 0x74defbfb, 0xff, 0x8, 0x8, 0x3, 0x5, 0x2f, 0x7, 0x5, 0x7, 0x8, 0x3, 0x5f72, 0x7, 0x1, 0x5, 0x6, 0x3, 0x2, 0x4, 0x7, 0x80000001, 0x5, 0x0, 0xfffffffe, 0x4dd5, 0x7, 0xeeb, 0x5, 0x80000000, 0x5, 0x5, 0x514c, 0x400, 0x80000000, 0x9, 0x5, 0xfffffff9, 0x80000, 0x6, 0x80000000, 0xfffffffa, 0x6, 0x9ef, 0x800, 0x1, 0x81, 0x401, 0x5, 0x1e, 0x200, 0x577, 0x54d, 0x5, 0x8001, 0xb5, 0xb77, 0xfffffffe, 0x80000001, 0x1, 0x7, 0xfffffffb, 0x9, 0x1f, 0x5, 0x8, 0x6000000, 0xa72, 0x1f, 0x5, 0x4, 0x80000000, 0x9, 0x400, 0xa5f, 0x200, 0xf2d2, 0x0, 0x401, 0x9, 0x3, 0x2, 0x80, 0x8, 0x7, 0x80000000, 0x86, 0x0, 0xfff, 0x0, 0x1, 0x4, 0x4, 0x7f, 0x0, 0x7fff, 0x6, 0x400, 0x53e, 0x3, 0x9, 0x7, 0x3, 0x3, 0xda63, 0x0, 0x769, 0xc6, 0x0, 0x5, 0x8, 0x23, 0x3, 0x3, 0x5, 0xb118, 0x1, 0x20, 0x1, 0x40, 0x2, 0x2, 0x0, 0xe17, 0x7fff, 0x6, 0x0, 0x4, 0x5, 0x5, 0x3ff, 0x0, 0x101, 0xfff, 0x5, 0x7ff, 0x16, 0x10000, 0xffffffdf, 0x1, 0x80, 0xfffffb40, 0x2, 0x48000000, 0x8000, 0x6, 0x3, 0x1, 0x9, 0x400, 0x3, 0xffff, 0x8, 0x400, 0x6, 0x4, 0x1, 0x8000, 0x9, 0x101, 0x7f, 0x401, 0x7, 0x400, 0x4, 0x4, 0x8, 0x400, 0x9, 0x8, 0x8, 0x8, 0x7, 0xcda, 0x3, 0x5, 0x47ae, 0x9, 0x2, 0x30f, 0x9, 0x8, 0xffff0000, 0x682, 0x0, 0x1, 0xfffffffb, 0xfffff001, 0x0, 0x2, 0x2, 0xfff, 0x3f, 0xffffffc1, 0x0, 0x1, 0x10000, 0x1, 0xa04, 0x3, 0xc4, 0x6, 0x1000, 0x8, 0xec2c, 0x7f, 0x531bb728, 0x9, 0x2, 0x28, 0x10000, 0x80, 0xe78d, 0x8, 0x8, 0xff, 0x2, 0x2, 0xee3, 0x6, 0x0, 0x1, 0x0, 0x2, 0x80, 0x9, 0x46db, 0x20, 0x1, 0x5, 0x7ff, 0xbf9, 0x100, 0xfffffffe, 0x1, 0xe06, 0x6, 0xffffffff, 0x3, 0xe07, 0x80000001, 0x20004, 0x5, 0x80000001, 0xff, 0x3, 0x5452, 0xfff, 0xfffffff9, 0x4, 0xff, 0x7, 0xffffffff, 0xffffffa6, 0x1, 0x2, 0x7, 0x5, 0xe0000000]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r7+30000000}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40, 0x2, @thr={&(0x7f0000000d00)="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", &(0x7f0000000040)="3f385cb3845610055d94fcb2476682b87e134a0d26d7678e19a26eb89827699fc31640fea047dfff0a7db91fc40f9a0789ed1c393cf68b8a4c09a577bf78de0076dad63197c09e385e776a4b06037eed7cafd53576b7de9289c2b06dd8cb9f8d8b22c6dd62b151f58eb72f1c523c371a395c7408d4a4acfef5e0"}}) [ 384.641986][ T8725] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 384.681967][ T3571] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 384.911909][ T8725] usb 5-1: device descriptor read/64, error 18 [ 384.931995][ T3571] usb 2-1: Using ep0 maxpacket: 8 [ 385.052134][ T3571] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 385.091849][ T3571] usb 2-1: config 0 has no interface number 0 [ 385.099576][ T3571] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 385.150777][ T3571] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 385.171117][ T3571] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 385.198025][ T3571] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 385.228503][ T3571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.267320][ T3571] usb 2-1: config 0 descriptor?? [ 385.302277][T16490] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.312193][ T8725] usb 5-1: device descriptor read/64, error 18 [ 385.331307][T16490] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.433159][ T8725] usb usb5-port1: attempt power cycle [ 385.579394][ T3571] usb 2-1: USB disconnect, device number 36 [ 386.141886][ T8725] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 386.281988][ T8725] usb 5-1: device descriptor read/8, error -71 [ 386.491837][ T8725] usb 5-1: device descriptor read/8, error -71 23:02:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x98, 0x0, 0x98, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x2001}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000040)={0x0, &(0x7f0000000000)="3bad059ee39a8c359b5a831db2b34cfc57a45d53cf", 0x15}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:02:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xe0411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x40}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpid() wait4(r0, 0x0, 0x40000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) bind$inet6(r1, &(0x7f00000026c0)={0xa, 0x0, 0x1, @loopback, 0x80000001}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x5, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000040)={0x3}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x60c381, 0x0) preadv(r5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x2) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r6, &(0x7f0000004d80), 0x237, 0x0) 23:02:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x2, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) uselib(&(0x7f0000000100)='./file0\x00') bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x24363, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:02:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:44 executing program 3: clone(0xa020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='$.6+\x14\xbe\xaa\xf7\xa3\x9e\xc7}\xcf\xb3\xc00x0}) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0x2005}) write$FUSE_GETXATTR(r4, &(0x7f0000000100)={0x18, 0x0, 0x4, {0x81}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 23:02:45 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x7, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:45 executing program 0: socket$inet(0xa, 0x801, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x8880, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x88000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x524}, 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000000, 0xfffffffffffffffd}, 0x0, 0x0) 23:02:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000006800ff7f000007000000001cde6ae91953bf7700080005"], 0x20}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 394.389770][ T17] usb 2-1: USB disconnect, device number 37 [ 394.561775][ T3571] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 394.831324][ T3571] usb 5-1: device descriptor read/64, error 18 23:02:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 395.211340][ T17] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 395.222289][ T3571] usb 5-1: device descriptor read/64, error 18 [ 395.341525][ T3571] usb usb5-port1: attempt power cycle [ 395.471387][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 395.612487][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.622293][ T17] usb 2-1: config 0 has no interface number 0 [ 395.628707][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 395.642672][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 395.655107][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 395.666736][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 395.677462][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.689245][ T17] usb 2-1: config 0 descriptor?? [ 395.711774][T16646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.719705][T16646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.951493][ T17] usb 2-1: USB disconnect, device number 38 [ 396.051180][ T3571] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 396.221768][ T3571] usb 5-1: device descriptor read/8, error -61 23:02:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/7) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={r1}, &(0x7f0000000400)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f0000000240)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x3, 0x14}) r4 = syz_open_pts(r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x2}}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x15) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xff}, &(0x7f0000000140)=0x8) 23:02:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:47 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2001}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) r8 = pidfd_getfd(r1, r1, 0x0) ioctl$BLKFRASET(r8, 0x1264, &(0x7f0000000000)=0x629) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r9, @ANYBLOB="00000000ff0fffff0000f8e101b623cfd1917e00340002000800060001001e06000001000000000000000000ffffffff000000000000000001000000000000000000000200000000"], 0x60}}, 0x0) 23:02:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x8, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0xb, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 396.431358][ T3571] usb 5-1: device descriptor read/8, error -71 [ 396.438908][T16706] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:02:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0xf, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x24, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:48 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x38, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 396.831263][ T3583] usb 2-1: new high-speed USB device number 39 using dummy_hcd 23:02:48 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0xff, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 396.925071][ T3571] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 397.072134][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 397.112103][ T3571] usb 5-1: device descriptor read/8, error -61 [ 397.191545][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.200160][ T3583] usb 2-1: config 0 has no interface number 0 [ 397.212773][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 397.229996][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 397.264913][T16706] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.267047][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 397.320020][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 397.363512][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.412281][ T3571] usb 5-1: device descriptor read/8, error -61 [ 397.468378][ T3583] usb 2-1: config 0 descriptor?? [ 397.511772][T16713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.519364][T16713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.531245][ T3571] usb usb5-port1: unable to enumerate USB device [ 397.788939][ T3583] usb 2-1: USB disconnect, device number 39 23:02:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1041}}}}}}]}, 0x48}}, 0x0) 23:02:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:50 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x2, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000000)={0x6, "5a33e34328a050ba5eac0f912275d9623beceecac9fc640f8a293d6688b694f3", 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x9, 0x0, [], 0xff}]}}) 23:02:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x49848980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x106}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200), 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xffff, @remote, 0x8}}}, 0x84) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$cont(0x1f, r3, 0x5dc39d39, 0x2e) 23:02:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x5, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800b00010076786c616e000b000400028008000a0036459cdb26cd03ccafe638a66cc3e0416adbdbe2864c5e588b51"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x20000050) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x40002002}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x8, 0x1}, 0x3, 0x6, &(0x7f0000000000)={0x80, 0xf, 0x1, 0x6, 0x7f}, 0x8, 0x4, 0x20, 0x0, 0x2, 0x9, &(0x7f0000000100)="fcfce7251e37e018a087afe74c46f9b1c9ac77fffa730f8bb00858521429adbc58044873726cd8b43243a516968fc15f2d1c2d7c789cb78d304071e4c7c5809d089dcbbd6fde8ca0c8c2afc841b3b4e68e64bdfb79c458bad05eb1a367279ff0678124dcc752023eae7fbc5a0e45071e2c50bc042c6174b22f3bd246193ecacb039ccc7d615a3d1103aceb3ab7872725ced811f8aad1ad9856c2c4d05076814927b479af1ea1c91d99980bbc8d82ff75d872130f4c1bc86c31d95a1d9892d0cecd446341f23830145559dd5540e534b4aeecf52077b8"}) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r8, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x40002002}) getsockopt$inet_udp_int(r9, 0x11, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) 23:02:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x6, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 399.646514][T16962] device vxlan0 entered promiscuous mode 23:02:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x8, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 399.721037][ T8725] usb 2-1: new high-speed USB device number 40 using dummy_hcd 23:02:51 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 399.791001][ T17] usb 5-1: new high-speed USB device number 48 using dummy_hcd 23:02:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0xb, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 399.991016][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 400.091352][ T17] usb 5-1: device descriptor read/64, error 18 [ 400.131214][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 400.143267][ T8725] usb 2-1: config 0 has no interface number 0 [ 400.159686][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 400.187110][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 400.231102][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 400.257531][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 400.276075][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.295497][ T8725] usb 2-1: config 0 descriptor?? [ 400.322959][T16949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 400.330088][T16949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 400.400671][T16976] device vxlan0 entered promiscuous mode [ 400.511516][ T17] usb 5-1: device descriptor read/64, error 18 [ 400.575051][ T8725] usb 2-1: USB disconnect, device number 40 [ 400.781260][ T17] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 401.090909][ T17] usb 5-1: device descriptor read/64, error 18 [ 401.500987][ T17] usb 5-1: device descriptor read/64, error 18 [ 401.621870][ T17] usb usb5-port1: attempt power cycle [ 402.330917][ T17] usb 5-1: new high-speed USB device number 50 using dummy_hcd 23:02:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0xc, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:53 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:53 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x6) sendto(r0, &(0x7f0000000080)="f5", 0x1, 0x0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="e6ffffff"], &(0x7f0000000080)=0x8) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffffc, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81}}, 0x24) prctl$PR_GET_THP_DISABLE(0x2a) 23:02:53 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0xd0002010}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000200)) clock_settime(0x0, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064ce, &(0x7f00000000c0)={0x0, 0x0}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x6, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x5, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x21}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 23:02:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 402.490827][ T17] usb 5-1: device descriptor read/8, error -71 23:02:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:53 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 402.710866][ T17] usb 5-1: device descriptor read/8, error -71 23:02:54 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x2, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 402.760909][ T3583] usb 2-1: new high-speed USB device number 41 using dummy_hcd 23:02:54 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x3, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:54 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x4, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 403.001050][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 403.121381][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 403.129932][ T3583] usb 2-1: config 0 has no interface number 0 [ 403.148391][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 403.169002][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 403.179656][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 403.194606][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 403.205112][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.220471][ T3583] usb 2-1: config 0 descriptor?? [ 403.223704][ T17] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 403.241087][T17038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.248132][T17038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.420871][ T17] usb 5-1: device descriptor read/8, error -61 [ 403.489601][ T3583] usb 2-1: USB disconnect, device number 41 [ 403.730877][ T17] usb 5-1: device descriptor read/8, error -61 [ 403.852154][ T17] usb usb5-port1: unable to enumerate USB device 23:02:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:56 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:56 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x6, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:56 executing program 2: r0 = socket(0x29, 0x4000000000080002, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) sendmsg$nl_route_sched(r6, &(0x7f0000002fc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f80)={&(0x7f00000030c0)=@gettaction={0xb0, 0x32, 0x0, 0x70bd27, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffe}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9eda}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3f}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4004) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003340)=[{0x0}, {&(0x7f0000003000)=""/190, 0xbe}], 0x2}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="26cce4968545571933427d6e0b898bdfb92f101398f66c2bb9607b3766d830198fc26bfa31e2f5a243361d0aea91db616472cab34feed7075d9b7c4192b32c80173e87", 0x43}, {&(0x7f0000000100)="a34fa39f1c742e62f1d6caef6cacc06ee62ed714c93f8f02540df75c560bf94d287237a9c59b8e7498967bafee59cc41ab94c1674d3a8cfa919ede6cf57028a07ab0b357e9259da4fa1e33189d67687ee25ce514e7e0f5a01281f0b95242cb6ee7aabf4421cf546ca2b506d4d1dfd007b367a2a9e51e357420c52e3878aee295004b5fcf126afcad26285f5375df3dc8576b000a7cc27820853c8d0076b94d91702e8d3d940bc6f76b2cfa49adfc980cf06057f36ddae8ebd6c382ad1e905d65eee83ec2d2918c7037d212c5a15a1718fb547589bf", 0xd5}, {&(0x7f0000000200)="44182f7961325ec3f6e80d8baca428517a115aa32ca31f4712558afc3ea1c3df54f02d5ebb4e7712f35e072dac14194383ff20be9b4b3d1320fd625ca47821ff580d476a563a7ffda3adb33a2fe29934eea3e41a03dd8e55a0edef4dfe0ca1159736a9a0125950b8d017fca04bc3ad4db6d118c07884dc0d638343b53926b202900f4b50b11d0c51935f5212f677b0604ce005e6fcc1ffbafd64d7deea3a774cb733ed4f784a5293a2136e0fed8e0792cebd268933386654dd6a86dec74ce0f08ecd7f2b5f9ed2eb9eca2c2e6eba494e7ac13d9d57e5684e14d58050d70372c6240a1608ae5df8bf751a23", 0xeb}], 0x3, &(0x7f0000000340)=[{0x1010, 0x10c, 0x200, "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"}, {0x78, 0x3a, 0x7, "a4f64bd4c040f7e7176cc1ea9120ff5e7f3d0bb1bd9f329c5d6e3fc8a6d20e972835179d05a5b6a813e690ff394ba1da04e6b0cf96e653f722053203bdd2d602391d8bceabdfc5bf477b09833a76bf41aa6ed136f53a7f53729ee2b0b451d32ca7765998fa17e512"}, {0x28, 0x100, 0x5, "ad3e370d67090d73299a11fe50d8bb63f0b55e5ae90d"}, {0x100, 0x111, 0x40, "d71fbe854b674efe104ff33dea6a036347e381992962d173cb570c880a2a772f3ecbe3721f49568edf9f12ddcec3cda74c4f72a8eae1dcb0135733f5743095edc0b62e5d9bbf7f40643933697ed4ca2cdd92fb4df69d7cecf5014f52b6ee32adaf74bc96047766a6143b72e7df2e3d19d20c871a00c29563fdb0861d4acc4bfddfdfad81296437890cf51414fd615d564bb0b898ec6706429caff6caf71e367033793c7793d920d35dc063b4b6c6c1ebec93b9216d68376276758d7b18d638687b7b5efad2748868c557a8f52af5afdb676352432a4d350833d9ca2ccf9f56b0955ce18d53bcad696efaee1c831dd7cf"}, {0xf8, 0x119, 0x6, "da7418b640a94c8a8f3329f5d388011124a4ec2ac1823bbdaa7723d1ca976620d0782a476c04663c17cde109d02d97a038edf25324ec41386c2186786889db4cd8ae72a4502e9eb7a9a0968048e86c10458ec3f5990f161ecefc5f966a7ce8c6ec79401824c97b280e5b4abfd5cf44e4b83118c17551deebf3b743d284764a27409d0f83001bc0b6c4350c59aa403ba2bbd06a3fa938885034dfad58b91b5feedbd06032a48554d16cf5e2daa12809a7e13ae8fdf1e38cec0c2e181c565f399e4f56df68fa2fe014081631223493717fde327263aaf9a873627667935e1a88c4b5273335"}, {0xf8, 0x77, 0x9, "3c5b564c05f473e3bbe6b50fd4f30234ed6eb6c962e5ae258e6f45c4e61491a484ec881149d6ae33780dfec053ce12be61b7bcba111c1606827ee8394d77ef83df661b4b4f8b38cde463466bf69e049f915cfaa9417994b0127a872c2494126259ae8888c5911326bb58308e1c8d7c04e5712ed4a41a63ad957bccdb03d7e3447c6badfdc238be1b33a026506dc25c90f1b31cc25e13009a6164155c050f60dd2a4c6b335faf16e80abd976f983000002c6aeeb6add09f2c981e55935759a52b5f8118501f63935fc7962a58f998291baaa057488210a57ec26b9bab852f851d82cd3b672f09"}, {0xa0, 0x29, 0x80000001, "d855f48cda9e1d6b0f9cd9b2899137f2a1a7be8cf21d3232eb18b8acb38cd10d6811975770d492c398ce94b718a718c48bb9c420d9026feacf4ee58704f4d33fffeaca0cff67e70c1c4b3703000000b67d17463374c3fdd8a248e536535e3587044623005e62a03c4a530ba64c853917bbee86e6afbc6a5500000000ba00"/140}, {0xd8, 0x115, 0x9, "ec2e45fb9c9c532e1e4f48e2a8c5caa4418e49ca415f3e5f16807d32eb89e4e48b68233cb1ee0b77b3b00bc90414d3f62f5ed176ceddfd5c259a0f4289bcb30d6709a980e4410c9772c9f4daaa26ac6923682e0b7ae28a125a9e6d898c4bffc6e32af40d92dc4895b285384383ff9c3b638307c2d5ffc80868a7f5e9db0d35a1e494b97c59ea6d3ae52d16e1c48a2815c6b9e0b55b6d0bf665027be35ce1c0dbb525f4f1b7f76fa4f4b4f301ee0a861cf28279f984c205b26295c3b472ca5e73b0aa5223031ace"}, {0xb8, 0x114, 0x7, "8128e9f9c8a5c60253a189c1c9f24c8603ccec6333288aafa94a25d128a3ff5a93b569c4457632e1ce3f94b882ee6a21fff3ad7dbd2344c71af543db40f663cd6ead2e35e91443b1feb6642df751027126f1903538fe42ffa8dc78db2d0379959ee3ab68d5821ed90d5f9351c9a6e71ceab70104eb6b7a600b0b3e172dd717bbfd85755ce818efdbee34a2d86d5f6a855608555ce8a5e6a34b51894bea5e0061448f0a6a98"}, {0x80, 0x117, 0x1, "419f316d2fc9089412e3a088ddd4ce7db20e0fb044126544af2f32e3eebb748e500b0e5506341110a3d32cdff2655a77908f9c3c26f4c176812f681d145ee478b4bcf221eb046fc41f9c0967563912cd1561c0ddcd577a3f5d4c469606d9675135b4ba0630b65e5ac4761c8461"}], 0x1650}}, {{&(0x7f00000019c0)=@ethernet={0x1, @link_local}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002e80)="a09dc1ec498e15bbd351882bce58a3f3d4a0cee9c56214a9b269eb28ef3b3e90291ec3bb5ede1ee843806f47737e4a0829f1c9775a8e149616d96706ba20af7df2c66ad8303b2b9a26d913fc74e59bf1e9a8d6a5adef8c5e0b39eca650356959c1e6507457428d590ba7bc015f7d15afbf942445503ddd7fc4059f2757c0cb1c2e0e5e0fc4fc857cf9cf5286fd8e6cfaba4015a18e25701ad118a5a7a9a39f736fd79f6488fd7a615b43254a1b818f941af496c3a1ec7f1b05a94cd442743b247215c8f4f8ed05a60e0d2a794bdade7f2c1d92aa834c66286762d8180b467dada3cb8b1770895d9d51790ef6311d8d7f72c446ae4c22", 0xf6}, {&(0x7f0000001a80)="9a3c044461fcedcea67cc49f39a2bd3e5854333ae70661e31053d87c60afdc2505e19a052b89e5737a61069a99e7a77950c5bdb2ba1e6eafa2362d6108bfb89e410d0912cc71e5b399aa0db82dcdcba7215636f424b8e82c3b1764f4c34501f82112b016373f24d0dd68a211a0f8cf214ab59a48bc67207e3d132fcfe969848040f8750f9e5a7da6d6b84ad8de11f5e4107d2fc9546418d7", 0x98}, {&(0x7f0000001b40)="9645de77fe96501b48b6dc5a1f5a55de4d1124a399cbee996860d37e992f1f2ca6d5904e85236be5d2d87afaba052e055977e2ec3a89bbbb2953ac65adfaa93f083acecb4a6e4c2e18b285912021d76eabcd93", 0x53}, {&(0x7f0000001bc0)="22c6fc96b8da3e2158dd6017e5d52fd46a74ccb39643d071571bd8ea745edc1c5d42b6a6f6bfa14170da384fe3f4e14272221cec523574472b138821e2d7c51ecd8761087f2b6f34435353209db394dc83ee486164699481cbd92dbc9b75226386843bf39bb0796b1b9878da2dc17924df7a7bbc3ead2b077b0dc7c231f2302d0a26f3c735f588fed5b9a482c7ea5f57", 0x90}, {&(0x7f0000001c80)="47644398596a17a865874c30e9157b94e9abba10f89f5f31f5c9c9f7e8fbe8a92a607057efc8776b514263ed5a7e680b24a411fdf7c7b449d3682df9f6b394800bac2508e51a7d2c07191f59efbb568e44b54c9e30e7ddb87de5238b6cf7ea8532e8be494d838713d6b880da5a1f91417ef734c05205c52a205be35315e528fb0ea75bad6a014a42ba8f7564cb1090698d2a1872398f6c7abd62281bce3d4846266a165baba8c7144a1cf956a21f3f7a972caf82bbdd31edf073178b8024fe3dc06244a28bb8a514345fba27990441d09731e7b52a3dc3ca129e340f5e", 0xdd}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000003b40)="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", 0x1000}, {&(0x7f0000004b40)="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", 0x1000}], 0x8, &(0x7f0000005b40)=[{0xc0, 0x6, 0x7, "0c907b22582a904ff045e7e5af90c2c9a868638a96ce1ca1bbc789e0eb4440147bff8037d93875cbe6b811327a1e581502a2cc939f775519eedd155d7b4c2a7efcc627d907b95c2f28b5a37204a40a5b46665e648d1ee00412433b38c42f6c0c0e14dc26c442fcde608ea87b52b8e6b673428c068e710889d8926d5318d8edbe926b3c5f5f3848d15de870d862408c1dd62b920bca28966ab79eb5a45749b69b9cab87bda8036974ba0a"}, {0xe8, 0x103, 0x3, "77e469cc798c0e0fe6e424db49fae4105169c4e4fd7a9f3f1662aeb0084adf587bdfc77e282db54a89c97f165c92cde0ce64015f289a434847063eec90f8b9e1d853c9d24f6b12f371ddb2acae9e609885be9144b75d0e20611c42473889048b63c7ed73cf2ad08dec13011aa6817e585143db1c5d9b8610a95fbf12726628bcdaa51bddce7c34223998a58a0f188f2229928462397b41e80ec236177353222d9447e6abe767ab609a7595aca960caeaca6ebd9d4fd796e48bced882388d9ab50b8ceb2414cbcfff0b4d0174493d3db68abd"}, {0x108, 0x4d2a1c339626e9c2, 0x1, "b20d406c1133e97ce6fd6ae6571bb3d083a79d5d9544c398e24899a8674a5f5dfb6791d66e4b5853a1423eed0a05440cb726a5b69fb9bc50b9cd6e5b06c02e4ddf810377ba30053fe12dce84adace379188195e47e071a13b5a61ac3feb1105d6fb1bb77b1c6bdcaddfbbbc0909292be62f4768a42b981156f2ab00b4cbfa94c3cea3ebf33be05531c628b87857541a3f04c4904671a40f071d0eaefd837bc2633f6374cf7910bbe028d73885b5f5a8b072b022c59b4c83a1df9cd11f77c000000000000000000e8dae1fb3821837493e9da1f44765dfb83bd604e599dbce6cfce506f63b793a4c9fa8b681f5204b5f677fb"}, {0x88, 0x110, 0xffffff80, "7a582596d6f0ce4c5bf15c3f3d150deb60b9e6107965d8b88228cce35381b9c573ee8058d2dc26fe4a1e6463041716d1dc2de0d6221044ab6f472de8c478351a73cb8f19a49ca0ddeafc260e17e90501ebb425c7ab2683d16d97b76c8b1044b79bb14737b430eaba40c3ebfa7ff9b2ab4510c246284b"}, {0x108, 0x103, 0x80, "79d69dc99da6e7ee3800504414a0afa79e84cb535bbf1a4868abf91b38791fb42f3284e7e1cf56989377ece2f0480226224e8ffb38c0f130e4849536ce4f109c83e9519601ca9de823f1ab3b2ce15daf63f8e063ce87d3cde6309d823fb1b954da96e5c1773f7e52367d9cb6bc6e4cdb2531a9f7191f730a0c6177d97d9253cf88c01cf0595bc59ed82da4ccab7ad94246986600c05c396ef377e5be93653ca494026d15ece961e1e8de55baaa76a019095e274e104837e2c3ee721ca638fa6fb142109d522db9317d455b189b62aebab13b000c4701786091d3b777b3f0cc5971c31683bc675d3b6f39a418aafac2289d6b"}, {0xd0, 0x10a, 0x3, "3768360245f575754036c5dda660fb21b7cf96c06f60d407b0f5c29abfbca7eea1aae5724080cd64fcc20a7ac463138af1a7c47708d174c3d5ebd49aa44b9d91988f02be77db1bfe573e80207ec40699ae898016db64171f1baf7680623c734020aae878c2189efb26cd39e32b55e158f9f177771fb792a08107d1111198711241fe27cdf1945b5a0266df1c56484cb598b0515823a422a777dfd1060000000000000006f909b1a449c5c353afe3e8b6a9833e7460bb36644c38e0f3"}], 0x510}}], 0x2, 0x44000) 23:02:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:56 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x7, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x8, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xb, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:57 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 405.860819][ T8725] usb 2-1: new high-speed USB device number 42 using dummy_hcd 23:02:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xf, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 405.910729][ T3562] usb 4-1: new high-speed USB device number 7 using dummy_hcd 23:02:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 406.040795][ T3583] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 406.110822][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 406.167298][ T3562] usb 4-1: Using ep0 maxpacket: 8 [ 406.230743][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 406.238973][ T8725] usb 2-1: config 0 has no interface number 0 [ 406.247174][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 406.259002][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 406.269969][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 406.285514][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 406.295292][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.310694][ T3562] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 406.313610][ T8725] usb 2-1: config 0 descriptor?? [ 406.318843][ T3562] usb 4-1: config 0 has no interface number 0 [ 406.330589][ T3583] usb 5-1: device descriptor read/64, error 18 [ 406.341015][T17118] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.360777][T17118] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.367851][ T3562] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 406.383912][ T3562] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 406.399320][ T3562] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 406.417985][ T3562] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 406.440944][ T3562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.463849][ T3562] usb 4-1: config 0 descriptor?? [ 406.492018][T17122] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.499489][T17122] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.595397][ T2475] usb 2-1: USB disconnect, device number 42 [ 406.780747][ T3583] usb 5-1: device descriptor read/64, error 18 [ 406.787315][ T3562] usb 4-1: USB disconnect, device number 7 [ 407.091762][ T3583] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 407.384064][ T3583] usb 5-1: device descriptor read/64, error 18 [ 407.830626][ T3583] usb 5-1: device descriptor read/64, error 18 [ 407.950810][ T3583] usb usb5-port1: attempt power cycle 23:02:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:02:59 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x38, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:02:59 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:59 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:02:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:02:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x800000, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xff}]}}}]}, 0x38}}, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) [ 408.680511][ T3583] usb 5-1: new high-speed USB device number 54 using dummy_hcd 23:03:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xff, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x13, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x14, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 408.980631][T14593] usb 2-1: new high-speed USB device number 43 using dummy_hcd 23:03:00 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x30, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:00 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 409.160420][ T3583] usb 5-1: device not accepting address 54, error -71 [ 409.240568][T14593] usb 2-1: Using ep0 maxpacket: 8 [ 409.370794][T14593] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 409.378933][T14593] usb 2-1: config 0 has no interface number 0 [ 409.410393][T14593] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 409.450411][T14593] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 409.474028][T14593] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 409.485384][T14593] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 409.496330][T14593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.509783][T14593] usb 2-1: config 0 descriptor?? [ 409.541913][T17222] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.548890][T17222] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.556714][ T3583] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 409.701225][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 409.813496][ T2475] usb 2-1: USB disconnect, device number 43 [ 409.831194][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.845938][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.880968][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 409.890107][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.923755][ T3583] usb 5-1: config 0 descriptor?? [ 410.170370][ T3583] usb 5-1: USB disconnect, device number 55 23:03:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:01 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:01 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:01 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:01 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x235) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x0, 0x82f, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990970, 0x4, [], @p_u8=&(0x7f0000000000)=0x80}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0xc1d1, 0x4) unshare(0x40000000) 23:03:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:03:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 410.819394][T17304] IPVS: ftp: loaded support on port[0] = 21 23:03:02 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 411.020424][ T3583] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 411.060736][ T3562] usb 5-1: new high-speed USB device number 56 using dummy_hcd 23:03:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:02 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x251, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) r7 = accept4(r6, &(0x7f0000000040)=@ll, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020801020000000000000000000000031c00048008000240000000cb080002400000008108000140000010001c000480080002407fffffe972f65184e58798b50800014080000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x49054) 23:03:02 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 411.270352][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 411.310868][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 411.354516][T17349] IPVS: ftp: loaded support on port[0] = 21 [ 411.391288][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 411.399359][ T3583] usb 2-1: config 0 has no interface number 0 [ 411.432401][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 411.444787][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.465369][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.498387][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 411.512095][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 411.528350][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 411.544744][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.554482][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 411.565570][ T3562] usb 5-1: config 0 descriptor?? [ 411.575751][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.586674][ T3583] usb 2-1: config 0 descriptor?? [ 411.630825][T17305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 411.637912][T17305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 411.720454][ T31] tipc: TX() has been purged, node left! [ 411.817872][ T17] usb 5-1: USB disconnect, device number 56 [ 411.863648][ T3583] usb 2-1: USB disconnect, device number 44 23:03:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:03 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:03 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:03 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40045402) 23:03:03 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000750000000000000000000000000000000001000000f8ffffff8b000000000000007f000000000000000700000000000000090000000000000000000000000000000000000000ff0f0000080000000500000000000000d7030000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce80c7e084e28e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000556600"/647]) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) fcntl$dupfd(r4, 0x406, r0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) 23:03:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:03:03 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 412.569084][T17424] IPVS: ftp: loaded support on port[0] = 21 23:03:03 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:03:04 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 412.830183][ T3583] usb 2-1: new high-speed USB device number 45 using dummy_hcd 23:03:04 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 412.900328][ T3571] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 413.042491][ T8725] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 413.090195][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 413.180375][ T3571] usb 5-1: device descriptor read/64, error 18 [ 413.220295][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 413.228311][ T3583] usb 2-1: config 0 has no interface number 0 [ 413.250146][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 413.270224][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 413.290215][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 413.300010][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 413.306018][ T8725] usb 3-1: Using ep0 maxpacket: 8 [ 413.325424][T17429] IPVS: ftp: loaded support on port[0] = 21 [ 413.349347][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.381529][ T3583] usb 2-1: config 0 descriptor?? [ 413.410861][T17427] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.418715][T17427] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.451482][ T8725] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 413.460130][ T8725] usb 3-1: config 0 has no interface number 0 [ 413.494951][ T8725] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 413.552391][ T8725] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 413.580129][ T3571] usb 5-1: device descriptor read/64, error 18 [ 413.613514][ T8725] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 413.642609][ T8725] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 413.663366][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.664257][ T3583] usb 2-1: USB disconnect, device number 45 [ 413.708956][ T8725] usb 3-1: config 0 descriptor?? [ 413.761792][T17451] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.769464][T17451] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.852171][ T3571] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 414.080785][ T8725] usb 3-1: USB disconnect, device number 17 [ 414.130179][ T3571] usb 5-1: device descriptor read/64, error 18 [ 414.524436][ T3571] usb 5-1: device descriptor read/64, error 18 [ 414.653877][ T3571] usb usb5-port1: attempt power cycle [ 415.380173][ T3571] usb 5-1: new high-speed USB device number 59 using dummy_hcd 23:03:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:06 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:06 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:03:06 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) set_tid_address(0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)) kcmp(0x0, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 23:03:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0xc0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000038000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000c674ad4f8cf84155cbf7a11cbec15b1ddccbf3f0ef01672520d8936516e364f8", @ANYRES16, @ANYBLOB="01002cbd7000fcdbdf25020000002800088024000780080006003300000008000500320e107908000600dc000000080005009b1219360800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30880d61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x446bb804}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc9b3e93}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2458a776}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x393853d8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x54}, 0x40000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r6, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@expire={0x140, 0x18, 0x400, 0x70bd2c, 0x25dfdbfd, {{{@in=@remote, @in=@loopback, 0x4e21, 0x7, 0x4e24, 0x8, 0x2, 0x20, 0x0, 0x62, r4, r6}, {@in=@empty, 0x4d6, 0xff}, @in=@private=0xa010100, {0xffff, 0xc14, 0xfff, 0x6ce, 0xff, 0x6, 0x7fffffff, 0x7f}, {0x8, 0x1b6000000000000, 0x101}, {0xafb6, 0x84dc, 0x7}, 0x70bd2a, 0x0, 0xa, 0x4, 0x1f, 0x52}, 0xa5}, [@srcaddr={0x14, 0xd, @in=@loopback}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80}, @lifetime_val={0x24, 0x9, {0x8, 0x80, 0x7, 0x101}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000038000/0x2000)=nil) [ 415.588761][ T3571] usb 5-1: device descriptor read/8, error -71 [ 415.611005][ T31] tipc: TX() has been purged, node left! 23:03:06 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 415.711378][ T31] tipc: TX() has been purged, node left! [ 415.718667][ T31] tipc: TX() has been purged, node left! 23:03:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 415.850311][ T3571] usb 5-1: device descriptor read/8, error -71 [ 415.920183][ T2574] usb 2-1: new high-speed USB device number 46 using dummy_hcd 23:03:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 416.190038][ T2574] usb 2-1: Using ep0 maxpacket: 8 [ 416.330270][ T2574] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.350079][ T2574] usb 2-1: config 0 has no interface number 0 [ 416.356357][ T2574] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 416.369930][ T3571] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 416.390492][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 416.413506][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 416.424967][ T2574] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 416.450011][ T2574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.475994][ T2574] usb 2-1: config 0 descriptor?? [ 416.507025][T17570] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.515553][T17570] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.554702][ T3571] usb 5-1: device descriptor read/8, error -61 [ 416.781649][ T2574] usb 2-1: USB disconnect, device number 46 [ 416.850744][ T3571] usb 5-1: device descriptor read/8, error -61 [ 417.015539][ T3571] usb usb5-port1: unable to enumerate USB device 23:03:09 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0x12, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c000000140801010000000000000000000000040900010073797a310000000005000300060000001c0004806364ced88862dd8f4146df15e18e0840ea0000007f080002400000000408000a40000000010900010073797a30000000002c070800054000000401080040000000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x4048891}, 0x4c4) 23:03:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 23:03:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0x1, 0x0, 0x0, 0x4}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4), 0x0, 0xfffffffffffffff7, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x2a51, 0x0, 'queue1\x00', 0x3}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x7001, 0x0) [ 418.741161][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:03:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:10 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0x1, 0x0, 0x0, 0x4}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4), 0x0, 0xfffffffffffffff7, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x2a51, 0x0, 'queue1\x00', 0x3}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x7001, 0x0) 23:03:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 418.979353][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:03:10 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 419.125550][ T8917] usb 5-1: new high-speed USB device number 61 using dummy_hcd 23:03:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$TCSBRK(r2, 0x5409, 0x101) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000280)=0x40000012, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x4) [ 419.419990][ T8917] usb 5-1: device descriptor read/64, error 18 [ 419.829866][ T8917] usb 5-1: device descriptor read/64, error 18 [ 420.108661][ T8917] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 420.380865][ T8917] usb 5-1: device descriptor read/64, error 18 [ 420.819800][ T8917] usb 5-1: device descriptor read/64, error 18 [ 420.940964][ T8917] usb usb5-port1: attempt power cycle [ 421.659795][ T8917] usb 5-1: new high-speed USB device number 63 using dummy_hcd 23:03:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 23:03:13 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000240)={{}, {0x0, r4+30000000}}, 0x0) r5 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000000)={0x2001}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r8, 0x529, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={r8, 0x3f, 0x6}) 23:03:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$TCSBRK(r2, 0x5409, 0x101) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000280)=0x40000012, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x4) 23:03:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 421.799701][ T8917] usb 5-1: device descriptor read/8, error -71 23:03:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x6, 0xc5, 0x8c, 0x8001, 0x2, [0x238, 0x7, 0x9f, 0x6], [0x400, 0xf7, 0x8, 0x200], [0x7fffffff, 0x4, 0x5, 0x273e], [0x80000001, 0xeef3, 0x7e43, 0x100]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 422.019743][ T8917] usb 5-1: device descriptor read/8, error -71 23:03:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 422.139769][ T17] usb 3-1: new high-speed USB device number 18 using dummy_hcd 23:03:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) [ 422.429662][ T17] usb 3-1: device descriptor read/64, error 18 [ 422.529917][ T8917] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 422.630773][ T8917] usb 5-1: Using ep0 maxpacket: 8 [ 422.670802][ T8917] usb 5-1: no configurations [ 422.675470][ T8917] usb 5-1: can't read configurations, error -22 [ 422.684851][ T8917] usb usb5-port1: unable to enumerate USB device [ 422.849668][ T17] usb 3-1: device descriptor read/64, error 18 [ 423.129616][ T17] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 423.439613][ T17] usb 3-1: device descriptor read/64, error 18 [ 423.859633][ T17] usb 3-1: device descriptor read/64, error 18 [ 423.989746][ T17] usb usb3-port1: attempt power cycle [ 424.709533][ T17] usb 3-1: new high-speed USB device number 20 using dummy_hcd 23:03:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:16 executing program 3: r0 = socket$inet6(0xa, 0x8004808000080003, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r2, 0x89f9, &(0x7f0000000100)="cfb879f3f69797dd332a77b9889c368053babef877b61b243bcf8b9db9d7f65bad6adfbe2d53c813abf628bd0a82272ef8008ffcd1f11a7ed047977380824eaa741c41add493d69f4a906f47a5f8501b718bb7dea7f08e0d256b7d76b63b3528fd8c141ff9b5bcdf015c28ddeb452625f0c849e950b5716a4db7e59dcc0a8fbd7aa6b01d442f84073bc3fc9d8e585d5f023088a1997acd0edce2418ec4017af6e2f9764aae") sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011002933d700c6080021000000040800", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}}, 0x0) 23:03:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) [ 424.836241][ T17] usb 3-1: device descriptor read/8, error -71 23:03:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 425.049730][ T17] usb 3-1: device descriptor read/8, error -71 23:03:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 425.199518][ T3583] usb 2-1: new high-speed USB device number 47 using dummy_hcd 23:03:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 425.319642][ T2506] usb 5-1: new high-speed USB device number 65 using dummy_hcd 23:03:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 425.489586][ T3583] usb 2-1: device descriptor read/64, error 18 [ 425.579475][ T2506] usb 5-1: Using ep0 maxpacket: 8 23:03:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 425.630498][ T2506] usb 5-1: no configurations [ 425.635246][ T2506] usb 5-1: can't read configurations, error -22 [ 425.819648][ T2506] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 425.889544][ T3583] usb 2-1: device descriptor read/64, error 18 [ 426.089435][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 426.130839][ T2506] usb 5-1: no configurations [ 426.135474][ T2506] usb 5-1: can't read configurations, error -22 [ 426.159444][ T3583] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 426.167303][ T2506] usb usb5-port1: attempt power cycle [ 426.439409][ T3583] usb 2-1: device descriptor read/64, error 18 [ 426.849377][ T3583] usb 2-1: device descriptor read/64, error 18 [ 426.899724][ T2506] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 426.980707][ T3583] usb usb2-port1: attempt power cycle [ 427.000142][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 427.043184][ T2506] usb 5-1: no configurations [ 427.047955][ T2506] usb 5-1: can't read configurations, error -22 [ 427.199409][ T2506] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 427.299522][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 427.350702][ T2506] usb 5-1: no configurations [ 427.355431][ T2506] usb 5-1: can't read configurations, error -22 [ 427.362718][ T2506] usb usb5-port1: unable to enumerate USB device [ 427.689352][ T3583] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 427.859860][ T3583] usb 2-1: device descriptor read/8, error -61 23:03:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@mcast2, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r9, 0x6, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r9, 0x2}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x78, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 23:03:19 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x2001}) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x300, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0xc0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0x40002002}) ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000000f000002f00000000000800a536f450387993e5850000006c0080000000004000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:03:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) 23:03:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 428.070074][ T3583] usb 2-1: device descriptor read/8, error -71 [ 428.082329][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.164617][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:03:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 428.344194][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:03:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 428.427710][ T2687] usb 5-1: new high-speed USB device number 69 using dummy_hcd 23:03:19 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0xffffff68}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f00000003c0)="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", 0x155}, {0x0}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4044000) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x180, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) [ 428.544484][T17841] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 428.561242][T17841] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 428.587489][ T3583] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 428.709376][ T2687] usb 5-1: Using ep0 maxpacket: 8 [ 428.759780][ T3583] usb 2-1: device descriptor read/8, error -61 [ 428.774700][ T2687] usb 5-1: no configurations [ 428.782385][ T2687] usb 5-1: can't read configurations, error -22 [ 428.949311][ T2687] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 429.039470][ T3583] usb 2-1: device descriptor read/8, error -61 [ 429.160246][ T3583] usb usb2-port1: unable to enumerate USB device [ 429.209390][ T2687] usb 5-1: Using ep0 maxpacket: 8 [ 429.259475][ T2687] usb 5-1: no configurations [ 429.264148][ T2687] usb 5-1: can't read configurations, error -22 [ 429.272273][ T2687] usb usb5-port1: attempt power cycle [ 429.989216][ T2687] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 430.089276][ T2687] usb 5-1: Using ep0 maxpacket: 8 [ 430.140215][ T2687] usb 5-1: no configurations [ 430.144902][ T2687] usb 5-1: can't read configurations, error -22 [ 430.301038][ T2687] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 430.399300][ T2687] usb 5-1: Using ep0 maxpacket: 8 [ 430.439373][ T2687] usb 5-1: no configurations [ 430.444060][ T2687] usb 5-1: can't read configurations, error -22 [ 430.451808][ T2687] usb usb5-port1: unable to enumerate USB device 23:03:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:22 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}, 0x10) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000100)={{}, {0x0, r7+30000000}}, 0x0) r8 = dup3(r5, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000000)={0x2001}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f0000000040)=""/247) 23:03:22 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 23:03:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) 23:03:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 431.379296][ T2475] usb 2-1: new high-speed USB device number 51 using dummy_hcd 23:03:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 431.527752][T14593] usb 5-1: new high-speed USB device number 73 using dummy_hcd 23:03:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 431.659273][ T2475] usb 2-1: device descriptor read/64, error 18 [ 431.780103][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 431.949939][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 431.957548][T14593] usb 5-1: can't read configurations, error -61 [ 432.059171][ T2475] usb 2-1: device descriptor read/64, error 18 [ 432.149260][T14593] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 432.329081][ T2475] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 432.419124][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 432.599090][ T2475] usb 2-1: device descriptor read/64, error 18 [ 432.619216][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 432.626928][T14593] usb 5-1: can't read configurations, error -61 [ 432.633940][T14593] usb usb5-port1: attempt power cycle [ 432.989037][ T2475] usb 2-1: device descriptor read/64, error 18 [ 433.109247][ T2475] usb usb2-port1: attempt power cycle [ 433.359059][T14593] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 433.459182][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 433.629772][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 433.637537][T14593] usb 5-1: can't read configurations, error -61 [ 433.789277][T14593] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 433.818990][ T2475] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 433.879215][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 433.989233][ T2475] usb 2-1: device descriptor read/8, error -61 [ 434.079110][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 434.087517][T14593] usb 5-1: can't read configurations, error -61 [ 434.094666][T14593] usb usb5-port1: unable to enumerate USB device 23:03:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r1}], 0x2, 0x2) r4 = epoll_create1(0x0) r5 = timerfd_create(0x2, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000100)={{}, {0x0, r7+30000000}}, 0x0) r8 = dup3(r5, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0x2001}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0xfffffffffffffe9e) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffffff, @private2, 0x100}, r9}}, 0x30) 23:03:25 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff83a509636870080045000038000000000001907864ff0002ac1414aa04009078030000004500000000000000002f0000e0000002ac1414aa8600000000000000"], 0x0) 23:03:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) [ 434.199043][ T2475] usb 2-1: device descriptor read/8, error -71 23:03:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 434.609487][T14593] usb 5-1: new high-speed USB device number 77 using dummy_hcd 23:03:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 434.689239][ T2475] usb 2-1: new high-speed USB device number 54 using dummy_hcd 23:03:26 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 434.869380][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 434.869574][ T2475] usb 2-1: device descriptor read/8, error -61 [ 435.069579][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 435.077642][T14593] usb 5-1: can't read configurations, error -61 [ 435.179045][ T2475] usb 2-1: device descriptor read/8, error -61 [ 435.268942][T14593] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 435.309693][ T2475] usb usb2-port1: unable to enumerate USB device [ 435.509014][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 435.691411][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 435.699163][T14593] usb 5-1: can't read configurations, error -61 [ 435.706722][T14593] usb usb5-port1: attempt power cycle [ 436.448839][T14593] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 436.549385][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 436.659035][ T0] NOHZ: local_softirq_pending 08 [ 436.730303][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 436.739106][T14593] usb 5-1: can't read configurations, error -61 [ 436.898937][T14593] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 437.009434][T14593] usb 5-1: Using ep0 maxpacket: 8 23:03:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$unix(0x1, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x405, 0x0, 0xd43}, 0x1c) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0x8) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 23:03:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) [ 437.178917][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 437.188783][T14593] usb 5-1: can't read configurations, error -61 [ 437.199135][T14593] usb usb5-port1: unable to enumerate USB device 23:03:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 437.628836][ T2475] usb 2-1: new high-speed USB device number 55 using dummy_hcd 23:03:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 437.758779][T14593] usb 5-1: new high-speed USB device number 81 using dummy_hcd 23:03:29 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 437.908916][ T2475] usb 2-1: device descriptor read/64, error 18 [ 438.008853][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 438.187171][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 438.203899][T14593] usb 5-1: can't read configurations, error -61 [ 438.348827][ T2475] usb 2-1: device descriptor read/64, error 18 [ 438.388943][T14593] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 438.629258][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 438.646454][ T2475] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 438.788870][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 438.796600][T14593] usb 5-1: can't read configurations, error -61 [ 438.803614][T14593] usb usb5-port1: attempt power cycle [ 438.968783][ T2475] usb 2-1: device descriptor read/64, error 18 [ 439.370578][ T2475] usb 2-1: device descriptor read/64, error 18 [ 439.488849][ T2475] usb usb2-port1: attempt power cycle [ 439.538690][T14593] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 439.638842][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 439.808811][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 439.817035][T14593] usb 5-1: can't read configurations, error -61 [ 439.968660][T14593] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 440.068828][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 440.198616][ T2475] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 440.228724][T14593] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 440.236431][T14593] usb 5-1: can't read configurations, error -61 23:03:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100045de19a65ab50f8de33cef7da026609a5d3300000000000000008c5df729ae5c000081e2795f000000000000", @ANYBLOB="f6260fb33078fdac5c12e9efce6a3c5c4882eed0d93528b7affc66712463287454810b31f9a1b9f2befff0328939b026675004104916214dcb41db02cafcc02f", @ANYBLOB="0000000000000000200012800b00010067656e657665000010000280050003008000000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x40800) [ 440.244169][T14593] usb usb5-port1: unable to enumerate USB device 23:03:31 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x10, &(0x7f0000000200)={r2}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x84) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8, 0x8001, 0x7, 0x5, 0x480, 0x7, 0xfffffffc}) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x40000000) 23:03:31 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) [ 440.324105][T17997] sctp: [Deprecated]: syz-executor.2 (pid 17997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.324105][T17997] Use struct sctp_sack_info instead [ 440.344601][T17999] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 440.368746][ T2475] usb 2-1: device descriptor read/8, error -71 23:03:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x40002002}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) write$P9_RSTATu(r5, &(0x7f0000000300)={0x60, 0x7d, 0x2, {{0x0, 0x47, 0x7, 0x4, {0x40, 0x3, 0x4}, 0x9f510000, 0x7fff, 0x685, 0xbf, 0x4, 'hsr\x00', 0x6, '&:,\x92[\'', 0x4, '-]/,', 0x6, ',2}&)('}, 0x4, '@.]\x00', r6, r1, r7}}, 0x60) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 23:03:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 440.519371][T18003] IPVS: ftp: loaded support on port[0] = 21 [ 440.581141][ T2475] usb 2-1: device descriptor read/8, error -71 23:03:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 440.668641][T14593] usb 5-1: new high-speed USB device number 85 using dummy_hcd 23:03:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 440.949498][T14593] usb 5-1: Using ep0 maxpacket: 8 23:03:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 441.060482][T17997] sctp: [Deprecated]: syz-executor.2 (pid 17997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.060482][T17997] Use struct sctp_sack_info instead [ 441.077718][ T2475] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 441.079188][T14593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.135071][T18003] IPVS: ftp: loaded support on port[0] = 21 [ 441.142703][T14593] usb 5-1: config 0 has no interfaces? [ 441.163778][T14593] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 441.192064][T14593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.215088][T14593] usb 5-1: config 0 descriptor?? [ 441.258711][ T2475] usb 2-1: device descriptor read/8, error -61 [ 441.400717][ T161] tipc: TX() has been purged, node left! [ 441.469056][T14593] usb 5-1: USB disconnect, device number 85 [ 441.539639][ T2475] usb 2-1: device descriptor read/8, error -61 [ 441.658853][ T2475] usb usb2-port1: unable to enumerate USB device 23:03:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:33 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:33 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:33 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:33 executing program 3: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, "e546e9bed0e63775"}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') [ 442.348517][T14593] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 442.598588][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 442.729167][T14593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.758494][T14593] usb 5-1: config 0 has no interfaces? [ 442.791789][T14593] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 442.848165][T14593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.901578][T14593] usb 5-1: config 0 descriptor?? [ 443.175656][T14593] usb 5-1: USB disconnect, device number 86 23:03:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) 23:03:34 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002e80)=""/167, 0xa7}], 0x1}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 23:03:34 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:34 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:34 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 443.878850][ T2687] usb 2-1: new high-speed USB device number 59 using dummy_hcd 23:03:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:35 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 444.118747][ T2687] usb 2-1: Using ep0 maxpacket: 8 [ 444.179107][T14593] usb 5-1: new high-speed USB device number 87 using dummy_hcd 23:03:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 444.238844][ T2687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.276880][ T2687] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.322443][ T2687] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 444.377076][ T2687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.430993][ T2687] usb 2-1: config 0 descriptor?? 23:03:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 444.460940][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 444.581291][T14593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.618642][T14593] usb 5-1: config 0 has no interfaces? [ 444.661665][T14593] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 444.702307][ T2687] usb 2-1: USB disconnect, device number 59 [ 444.705851][T14593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.769634][T14593] usb 5-1: config 0 descriptor?? [ 445.034728][ T3583] usb 5-1: USB disconnect, device number 87 23:03:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) 23:03:36 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:36 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{0xf000, 0x10f000, 0xd, 0x4, 0x9, 0x1, 0x0, 0x1f, 0x40, 0x9, 0x5, 0xbb}, {0x0, 0x4000, 0x12, 0x0, 0x2, 0x3f, 0x0, 0x0, 0x9b, 0x3, 0x5, 0x40}, {0xd000, 0x0, 0xd, 0x5, 0x1, 0x68, 0x9, 0x81, 0x0, 0x94, 0x81, 0x6}, {0x0, 0x5000, 0xa, 0x1, 0x0, 0x43, 0x7, 0x0, 0x6, 0x0, 0xff, 0x40}, {0x0, 0x1000, 0xe, 0x0, 0xff, 0x3, 0x1, 0x0, 0x7, 0x93, 0x7}, {0xf000, 0x10000, 0xc, 0x5, 0x1f, 0x9, 0x1, 0x1, 0x1, 0x9, 0x0, 0x4}, {0x1, 0x2, 0x4, 0x0, 0x20, 0x20, 0x1, 0x7, 0x1, 0x2a, 0x7, 0x8}, {0xd000, 0xf000, 0xd, 0x4, 0xff, 0x40, 0x0, 0x8, 0x6, 0x4, 0x81, 0x3f}, {0x2000, 0x1}, {0x1}, 0x10009, 0x0, 0x1000, 0x4e0268, 0x9, 0xe000, 0x56f50e353dc9335a, [0x0, 0x3, 0x4, 0x6]}) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x227b, 0x744000) creat(&(0x7f0000000300)='./bus\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./bus\x00') r1 = socket$inet6(0xa, 0x5, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 23:03:36 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 445.344988][ T28] audit: type=1800 audit(1593039816.591:22): pid=18176 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15753 res=0 23:03:36 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 445.604636][ T28] audit: type=1800 audit(1593039816.851:23): pid=18187 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15755 res=0 [ 445.638369][ T3583] usb 2-1: new high-speed USB device number 60 using dummy_hcd 23:03:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c56700000001090224000100"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:36 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:36 executing program 2: r0 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sNL\\\xc0\xe7ZX\x8d\xddx\xc6\xb6P\x1d\xfd\x90\xd1l@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\x0f\xfeA\x02Y%j\x04n\xe3\xa0\x03\xde\xd5\xfb\xb8\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(=\xafVD6BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*-/\xa0\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2e, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r4, &(0x7f0000000100)={0x1f, 0x37, 0x2, {0x2, 0x6, 0x0, r5, 0x1, '['}}, 0x1f) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0xc, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) sendfile(r1, r0, 0x0, 0xeefffdeb) [ 445.888431][ T3583] usb 2-1: Using ep0 maxpacket: 8 23:03:37 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 445.930532][T18197] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 446.039476][ T3583] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.071550][T18202] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 446.073055][ T3583] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.088286][ T2475] usb 5-1: new high-speed USB device number 88 using dummy_hcd 23:03:37 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00e4ff000402000008000a00", @ANYRES32=r9], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400f87f769d53ef4a9aebc12b", @ANYRES32=r9, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008"], 0x3c}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 446.229570][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 446.275576][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.312135][ T3583] usb 2-1: config 0 descriptor?? [ 446.383839][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.388352][ T2475] usb 5-1: Using ep0 maxpacket: 8 [ 446.459366][T18210] device bridge1 entered promiscuous mode [ 446.487653][T18213] device bridge_slave_0 left promiscuous mode [ 446.499131][T18213] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.529062][ T2475] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.550481][ T2475] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.567022][ T2475] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 446.571333][ T2506] usb 2-1: USB disconnect, device number 60 [ 446.590878][ T2475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.607334][ T2475] usb 5-1: config 0 descriptor?? [ 446.668752][T18213] bridge1: port 1(bridge_slave_0) entered blocking state [ 446.675879][T18213] bridge1: port 1(bridge_slave_0) entered disabled state [ 446.699914][T18213] device bridge_slave_0 entered promiscuous mode [ 446.707223][T18213] bridge1: port 1(bridge_slave_0) entered blocking state [ 446.716151][T18213] bridge1: port 1(bridge_slave_0) entered forwarding state [ 446.762104][T18216] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 446.792983][T18216] bridge1: port 1(bridge_slave_0) entered disabled state [ 446.814737][T18216] device bridge1 left promiscuous mode [ 446.874405][ T8917] usb 5-1: USB disconnect, device number 88 23:03:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) 23:03:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:38 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 447.056698][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.072238][T18213] bridge1: port 1(bridge_slave_0) entered blocking state [ 447.079553][T18213] bridge1: port 1(bridge_slave_0) entered forwarding state [ 447.141983][T18213] device bridge1 entered promiscuous mode [ 447.175409][T18216] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 23:03:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 447.266030][T18216] bridge1: port 1(bridge_slave_0) entered disabled state [ 447.284244][T18216] device bridge1 left promiscuous mode 23:03:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c56700000001090224000100"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 447.588269][ T2506] usb 2-1: new high-speed USB device number 61 using dummy_hcd 23:03:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 447.838249][ T2506] usb 2-1: Using ep0 maxpacket: 8 23:03:39 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 447.948270][ T2475] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 447.968514][ T2506] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 23:03:39 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 447.997236][T18216] syz-executor.2 (18216) used greatest stack depth: 22400 bytes left [ 448.026354][ T2506] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.081764][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 23:03:39 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000054f22240c410400100000000000001090212000100000057fa040000002c26a1007a73b9491703027e175e1993250409def4e9ec7f3bc711929585eb25e64b9af13904fa96352cd54d75e57e6940f7ea8f9180058d7085002c8d245dc23b74557909d5b64acebd73c077eb6fd12ccda96ff718916fc0dbe59b2820311fede78efc4ca9be7894b7262b26fbbf0ca2900bf1e389b886530beb2ad4d04131e88083f6d6b42d74954c749e93773edb5e5e493f67f156da088c825feb648fb8821443bba892ff9a33b9f5ea30ce0527a6fc761b5df1977a1eb29cef93af3d3341a6631acfdccc927b1110c4e8c2e0627ff61cd7900a77a8"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="5666f400005b9a70070076c1a1806b3fdddeaf0261721a44d412816a777774a8a1776c8e140d09c5c640db602286ff211158641b92f71e287dbf8fc86084b0e47858d9a4b7a33170e57b81a17334ef27adb24f0a95eb240b92b8bfcbba92e4f724e732b63585cd1e2e289fbea24d28f3cdb4212e1b1ed7107e"], 0x0, 0x0, 0x0, 0x0}) [ 448.129997][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.181317][ T2506] usb 2-1: config 0 descriptor?? [ 448.210268][ T2475] usb 5-1: Using ep0 maxpacket: 8 [ 448.328903][ T2475] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.359173][ T2475] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.401660][ T2475] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 448.441579][ T2475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.451953][T14593] usb 2-1: USB disconnect, device number 61 [ 448.457605][ T2475] usb 5-1: config 0 descriptor?? [ 448.608428][ T161] tipc: TX() has been purged, node left! [ 448.641120][ T8917] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 448.713144][ T3583] usb 5-1: USB disconnect, device number 89 23:03:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) 23:03:40 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:40 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:40 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 448.928510][ T8917] usb 3-1: no configurations [ 448.933309][ T8917] usb 3-1: can't read configurations, error -22 23:03:40 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 449.088242][ T8917] usb 3-1: new high-speed USB device number 23 using dummy_hcd 23:03:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c56700000001090224000100"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:40 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 449.358157][T14593] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 449.382249][ T8917] usb 3-1: no configurations [ 449.387720][ T8917] usb 3-1: can't read configurations, error -22 23:03:40 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 449.425076][ T8917] usb usb3-port1: attempt power cycle 23:03:40 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 449.638394][T14593] usb 2-1: Using ep0 maxpacket: 8 [ 449.708465][ T2506] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 449.768443][T14593] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 449.776478][T14593] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 23:03:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 449.848965][T14593] usb 2-1: config 0 has no interface number 0 [ 449.877005][T14593] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 449.937255][T14593] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 23:03:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 449.978177][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 450.018451][T14593] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 450.057730][T14593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.101587][T14593] usb 2-1: config 0 descriptor?? [ 450.111367][ T2506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.147054][ T2506] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.158244][ T8917] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 450.180189][T14593] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 450.208859][ T2506] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 450.228187][ T2506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.263654][ T2506] usb 5-1: config 0 descriptor?? [ 450.298388][ T8917] usb 3-1: no configurations [ 450.303135][ T8917] usb 3-1: can't read configurations, error -22 [ 450.382086][ T2506] usb 2-1: USB disconnect, device number 62 [ 450.468154][ T8917] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 450.530625][ T17] usb 5-1: USB disconnect, device number 90 [ 450.608407][ T8917] usb 3-1: no configurations [ 450.613215][ T8917] usb 3-1: can't read configurations, error -22 [ 450.628076][ T8917] usb usb3-port1: unable to enumerate USB device 23:03:42 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:42 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:42 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) 23:03:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) 23:03:42 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 451.558072][ T17] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 451.568110][T14593] usb 2-1: new high-speed USB device number 63 using dummy_hcd 23:03:42 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 451.808015][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 451.838158][T14593] usb 2-1: Using ep0 maxpacket: 8 [ 451.929175][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.960131][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 23:03:43 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 451.978246][T14593] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 452.006386][T14593] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.026671][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 452.078029][T14593] usb 2-1: config 0 has no interface number 0 [ 452.084171][T14593] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 452.086669][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:03:43 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 452.184610][ T17] usb 5-1: config 0 descriptor?? [ 452.185944][T14593] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.317563][T14593] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 23:03:43 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 452.360723][T14593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:03:43 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:43 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 452.419048][T14593] usb 2-1: config 0 descriptor?? [ 452.459612][T14593] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 452.469591][T14593] usb 5-1: USB disconnect, device number 91 23:03:43 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 452.692579][ T2687] usb 2-1: USB disconnect, device number 63 23:03:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) 23:03:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) 23:03:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x100000001, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ptrace$getsig(0x2, 0x0, 0x10000, &(0x7f0000000300)) r4 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000100)="1c00000d1a009b9a140000003b9b301f020001000000d849b91c1b00", 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {0xffe}, 0x31}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)={0x0, 0x7dfc, 0xfff8}, 0xfffffffffffffead) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8, 0x4}, &(0x7f0000000200)=0x8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfff8}, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x828, 0x2, 0x9, 0x860e, 0x7, 0x7, r0}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) setpriority(0x0, 0x0, 0x7fff) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:03:44 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 453.597883][ T17] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 453.629096][ T2687] usb 2-1: new high-speed USB device number 64 using dummy_hcd 23:03:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:45 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:45 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:45 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 453.858511][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 453.878940][ T2687] usb 2-1: Using ep0 maxpacket: 8 [ 453.978825][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.993746][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.004179][ T2687] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 454.017967][ T2687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.035215][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 454.035692][T18406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 454.049025][ T2687] usb 2-1: config 0 has no interface number 0 [ 454.073865][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.095523][ T17] usb 5-1: config 0 descriptor?? [ 454.105196][ T2687] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 454.128410][ T2687] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.169682][ T2687] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 454.180633][ T2687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.190689][ T2687] usb 2-1: config 0 descriptor?? [ 454.229817][ T2687] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 454.383572][ T2687] usb 5-1: USB disconnect, device number 92 [ 454.438847][ T3583] usb 2-1: USB disconnect, device number 64 23:03:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) 23:03:46 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:46 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:46 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:46 executing program 2: r0 = getpgid(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x100}}, r0, 0x0, r3, 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r4, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d0002000000f3000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324ddc00b517a997836924511728a9db8b74e5981c1753a996ec85312190e0dd4c0bfb9857"], 0x2c) sendfile(r4, r4, &(0x7f0000001000), 0xffff) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40002002}) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0)='NLBL_UNLBL\x00') setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}) 23:03:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) 23:03:46 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:46 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:46 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:46 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:46 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:46 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 455.317844][ T8917] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 455.338635][ T17] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 455.557930][ T8917] usb 5-1: Using ep0 maxpacket: 8 [ 455.578325][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 455.678736][ T8917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.689315][ T8917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.699866][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 455.720048][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.730291][ T8917] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 455.739492][ T17] usb 2-1: config 0 has no interface number 0 [ 455.745651][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 455.758549][ T8917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.766994][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 455.781275][ T8917] usb 5-1: config 0 descriptor?? [ 455.786620][ T17] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.805935][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 455.817036][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.838554][ T17] usb 2-1: config 0 descriptor?? [ 455.858278][T18471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 455.918061][ T17] usb 2-1: invalid MIDI in EP 0 [ 455.925526][ T17] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 456.030646][T14593] usb 5-1: USB disconnect, device number 93 [ 456.084032][ T3583] usb 2-1: USB disconnect, device number 65 23:03:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) 23:03:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:47 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:47 executing program 2: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x80001, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x5, 0x400) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "03715b4d2f0a0247", "1866f2f6921e80b7f75ead98c5f1570eb8aa08d8fdb194d24cc83414e885074e", "8219bd8d", "3dbbef4749e6dd77"}, 0x38) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x2000024d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97, 0x3b2c}, 0x4000}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$FITRIM(0xffffffffffffffff, 0x82307201, &(0x7f0000000100)) 23:03:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 23:03:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x4000000a, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0e01a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 23:03:48 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:48 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:48 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 456.957768][ T17] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 456.958053][T14593] usb 5-1: new high-speed USB device number 94 using dummy_hcd 23:03:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 457.218443][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 457.287706][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 457.338286][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 457.356944][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.405429][ T17] usb 2-1: config 0 has no interface number 0 [ 457.418505][T14593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.437108][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 457.438966][T14593] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 457.479792][T14593] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 457.503381][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 457.513868][ T17] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.517181][T14593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.527535][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 457.566505][T14593] usb 5-1: config 0 descriptor?? [ 457.570822][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.589885][ T17] usb 2-1: config 0 descriptor?? [ 457.618483][T18532] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 457.678077][ T17] usb 2-1: invalid MIDI in EP 0 [ 457.686592][ T17] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 457.828457][ T17] usb 5-1: USB disconnect, device number 94 [ 457.849442][ T8725] usb 2-1: USB disconnect, device number 66 23:03:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) 23:03:49 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:49 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:49 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000780000000000889078ac1e0001ac1414bb000000000064830c25a68cb678d77cbab53f8948d6907802000000000000000000000034d4865fba35894c9fa23611c175492e40d6210f308b4ced98172625832b65407e11083cff00660ac7e9db9a02e91af7dd4a8cd1c2c7be2d85af2aac25a2be72b763a2206792270d6a5b48079b47c203"], 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) 23:03:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 23:03:49 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8242, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002b00)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="fd", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="182ef7000000000200"/21], 0x18}], 0x1, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1d) 23:03:49 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:49 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:49 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:49 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x2, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 458.713094][ T3583] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 458.717838][ T17] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 458.977532][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 458.985181][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 459.107780][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.108475][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 459.118276][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.132205][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.138294][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 459.152489][ T17] usb 2-1: config 0 has no interface number 0 [ 459.155496][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.160920][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 459.175989][ T3583] usb 5-1: config 0 descriptor?? [ 459.187706][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 459.199036][ T17] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.214256][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 459.224480][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.242734][ T17] usb 2-1: config 0 descriptor?? [ 459.268086][T18593] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.328502][ T17] usb 2-1: invalid MIDI in EP 0 [ 459.334007][ T17] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 459.438381][T14593] usb 5-1: USB disconnect, device number 95 [ 459.491467][ T17] usb 2-1: USB disconnect, device number 67 23:03:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) 23:03:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:51 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:51 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x13}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000000)={0x4, 0x399c0, 0x1, 0x5cb, 0x8, 0x6, 0x40}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000000040)) 23:03:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 23:03:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:51 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:51 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x6, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x7, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:51 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 460.357642][ T17] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 460.397535][ T8725] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 460.618055][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 460.647766][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 460.738312][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.749234][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 460.758834][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 460.768610][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 460.776745][ T8725] usb 2-1: config 0 has no interface number 0 [ 460.784321][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.793703][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 460.806073][ T17] usb 5-1: config 0 descriptor?? [ 460.811547][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 460.826783][ T8725] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 460.839997][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 460.851671][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.864272][ T8725] usb 2-1: config 0 descriptor?? [ 460.892289][T18656] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 460.947927][ T8725] usb 2-1: invalid MIDI in EP 0 [ 460.953320][ T8725] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 460.978437][ T0] NOHZ: local_softirq_pending 08 [ 461.055334][ T8725] usb 5-1: USB disconnect, device number 96 [ 461.110176][ T3583] usb 2-1: USB disconnect, device number 68 23:03:52 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x8, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:52 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:52 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x458040, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x10, &(0x7f0000000200)={r7}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r7, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r8, 0x7, 0xa35}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1f}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001f00b0000000000000000000a04", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 23:03:52 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:52 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) 23:03:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0xb, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 461.776648][T18715] sctp: [Deprecated]: syz-executor.2 (pid 18715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.776648][T18715] Use struct sctp_sack_info instead 23:03:53 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 461.837527][T18715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:03:53 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:53 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0xf, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 461.895016][T18715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.921683][T18715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:03:53 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 462.021075][T14593] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 462.027763][ T8725] usb 2-1: new high-speed USB device number 69 using dummy_hcd 23:03:53 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x24, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 462.267660][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 462.267692][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 462.394403][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.402971][ T8725] usb 2-1: config 0 has no interface number 0 [ 462.419020][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 462.438243][T14593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.442039][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 462.452334][T14593] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.467183][ T8725] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 462.474526][T14593] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 462.492170][T14593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.492734][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 462.502351][T14593] usb 5-1: config 0 descriptor?? [ 462.523280][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.532618][T18740] sctp: [Deprecated]: syz-executor.2 (pid 18740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.532618][T18740] Use struct sctp_sack_info instead [ 462.550663][ T8725] usb 2-1: config 0 descriptor?? [ 462.574154][T18747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.582383][T18713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.604765][T18747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.623364][T18747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:03:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) r6 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000000)={0x2001}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0xc8}}, 0x0) 23:03:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x38, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 462.659297][ T8725] usb 2-1: invalid MIDI in EP 0 [ 462.664869][ T8725] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 462.776800][T18708] FAULT_INJECTION: forcing a failure. [ 462.776800][T18708] name failslab, interval 1, probability 0, space 0, times 0 [ 462.802331][T18708] CPU: 0 PID: 18708 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 462.810720][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.820900][T18708] Call Trace: [ 462.824243][T18708] dump_stack+0x188/0x20d [ 462.828592][T18708] should_fail.cold+0x5/0xa [ 462.833125][T18708] ? lock_downgrade+0x840/0x840 [ 462.837991][T18708] ? fault_create_debugfs_attr+0x140/0x140 [ 462.843817][T18708] should_failslab+0x5/0xf [ 462.848421][T18708] kmem_cache_alloc+0x29b/0x740 [ 462.853295][T18708] ? ksys_write+0x212/0x250 [ 462.857910][T18708] getname_flags+0xd2/0x5b0 [ 462.862436][T18708] do_sys_openat2+0x3fc/0x7d0 [ 462.867128][T18708] ? file_open_root+0x400/0x400 [ 462.872370][T18708] ? __mutex_unlock_slowpath+0xe2/0x660 [ 462.879502][T18708] ? wait_for_completion+0x270/0x270 [ 462.884822][T18708] ? __this_cpu_preempt_check+0x28/0x190 [ 462.890468][T18708] ? __sb_end_write+0x101/0x1d0 [ 462.897679][T18708] do_sys_open+0xc3/0x140 [ 462.902017][T18708] ? filp_open+0x70/0x70 [ 462.906266][T18708] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 462.912261][T18708] ? do_syscall_64+0x21/0x7d0 [ 462.919974][T18708] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 462.925972][T18708] do_syscall_64+0xf6/0x7d0 [ 462.930576][T18708] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 462.936466][T18708] RIP: 0033:0x45ca59 [ 462.940359][T18708] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.959962][T18708] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 462.968385][T18708] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 462.976664][T18708] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 462.984728][T18708] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 462.992707][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 463.000674][T18708] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 463.038195][ T8725] usb 2-1: USB disconnect, device number 69 [ 463.103101][ T3583] usb 5-1: USB disconnect, device number 97 23:03:54 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:54 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:54 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:54 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x300, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f0000000100)={{}, {0x0, r8+30000000}}, 0x0) dup3(r6, r5, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16=r6], 0x2b2) 23:03:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) 23:03:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x600, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x700, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:55 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 463.967358][ T3583] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 464.021380][ T3562] usb 5-1: new high-speed USB device number 98 using dummy_hcd 23:03:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0xb00, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0xf00, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 464.247475][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 464.267548][ T3562] usb 5-1: Using ep0 maxpacket: 8 23:03:55 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 464.368231][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.376260][ T3583] usb 2-1: config 0 has no interface number 0 [ 464.387959][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.412076][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.434154][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 464.464349][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 464.493077][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 464.511453][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.530112][ T3583] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 464.551175][ T3562] usb 5-1: config 0 descriptor?? [ 464.564098][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 464.593104][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.617736][ T3583] usb 2-1: config 0 descriptor?? [ 464.668075][T18785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 464.747571][ T3583] usb 2-1: invalid MIDI in EP 0 [ 464.753333][ T3583] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 464.806073][T18791] FAULT_INJECTION: forcing a failure. [ 464.806073][T18791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 464.819310][T18791] CPU: 0 PID: 18791 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 464.827636][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.837838][T18791] Call Trace: [ 464.841144][T18791] dump_stack+0x188/0x20d [ 464.845486][T18791] should_fail.cold+0x5/0xa [ 464.850002][T18791] ? fault_create_debugfs_attr+0x140/0x140 [ 464.855996][T18791] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 464.862090][T18791] __alloc_pages_nodemask+0x17a/0x810 [ 464.867469][T18791] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 464.874234][T18791] ? find_held_lock+0x2d/0x110 [ 464.879011][T18791] ? lock_downgrade+0x840/0x840 [ 464.883887][T18791] cache_grow_begin+0x8c/0xc10 [ 464.888841][T18791] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 464.894305][T18791] kmem_cache_alloc+0x670/0x740 [ 464.899160][T18791] ? ksys_write+0x212/0x250 [ 464.903666][T18791] getname_flags+0xd2/0x5b0 [ 464.908173][T18791] do_sys_openat2+0x3fc/0x7d0 [ 464.913335][T18791] ? file_open_root+0x400/0x400 [ 464.918217][T18791] ? __mutex_unlock_slowpath+0xe2/0x660 [ 464.923787][T18791] ? wait_for_completion+0x270/0x270 [ 464.929099][T18791] ? __this_cpu_preempt_check+0x28/0x190 [ 464.934743][T18791] ? __sb_end_write+0x101/0x1d0 [ 464.939614][T18791] do_sys_open+0xc3/0x140 [ 464.943954][T18791] ? filp_open+0x70/0x70 [ 464.948219][T18791] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 464.954209][T18791] ? do_syscall_64+0x21/0x7d0 [ 464.958931][T18791] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 464.964923][T18791] do_syscall_64+0xf6/0x7d0 [ 464.969438][T18791] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 464.975326][T18791] RIP: 0033:0x45ca59 [ 464.979223][T18791] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.999422][T18791] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.007850][T18791] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 465.015814][T18791] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 465.023778][T18791] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 465.031737][T18791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 465.039699][T18791] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 465.072441][ T17] usb 2-1: USB disconnect, device number 70 [ 465.115568][ T8725] usb 5-1: USB disconnect, device number 98 23:03:56 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:56 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x2400, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:56 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:56 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'bond_slave_0\x00', {0x3}, 0xfff8}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201002049ba7b08861a23750758000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 23:03:56 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) 23:03:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3800, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:57 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4000, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:57 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:57 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0xffff, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:03:57 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 465.968386][ T8725] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 465.977196][ T3583] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 466.037282][ T17] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 466.207294][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 466.247248][ T3583] usb 3-1: Using ep0 maxpacket: 8 [ 466.288404][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 466.327668][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 466.335701][ T8725] usb 2-1: config 0 has no interface number 0 [ 466.345020][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 466.358626][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 466.370357][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 466.382445][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 466.393830][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 466.417517][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.428471][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.437412][ T3583] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.440110][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.453687][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 466.463993][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.473416][ T8725] usb 2-1: config 0 descriptor?? [ 466.492194][ T17] usb 5-1: config 0 descriptor?? [ 466.497852][T18850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 466.527680][ T3583] usb 3-1: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice=58.07 [ 466.536755][ T3583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.555307][ T3583] usb 3-1: config 0 descriptor?? [ 466.558266][ T8725] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 466.608429][ T3583] ch341 3-1:0.0: ch341-uart converter detected [ 466.723488][T14593] usb 2-1: USB disconnect, device number 71 [ 466.769059][T18856] FAULT_INJECTION: forcing a failure. [ 466.769059][T18856] name failslab, interval 1, probability 0, space 0, times 0 [ 466.782535][T18856] CPU: 0 PID: 18856 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 466.790863][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.800914][T18856] Call Trace: [ 466.804210][T18856] dump_stack+0x188/0x20d [ 466.808546][T18856] should_fail.cold+0x5/0xa [ 466.813058][T18856] ? lock_downgrade+0x840/0x840 [ 466.817907][T18856] ? fault_create_debugfs_attr+0x140/0x140 [ 466.823715][T18856] should_failslab+0x5/0xf [ 466.828123][T18856] kmem_cache_alloc+0x29b/0x740 [ 466.832983][T18856] ? mark_lock+0x11f/0xdd0 [ 466.837393][T18856] ? print_usage_bug+0x240/0x240 [ 466.842520][T18856] ? stack_trace_consume_entry+0x160/0x160 [ 466.848332][T18856] __alloc_file+0x21/0x350 [ 466.852751][T18856] alloc_empty_file+0x6d/0x170 [ 466.857509][T18856] path_openat+0xe3/0x27d0 [ 466.862110][T18856] ? path_lookupat.isra.0+0x530/0x530 [ 466.867765][T18856] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 466.873750][T18856] ? lock_acquire+0x1f2/0x8f0 [ 466.878680][T18856] do_filp_open+0x192/0x260 [ 466.883186][T18856] ? may_open_dev+0xf0/0xf0 [ 466.887783][T18856] ? __alloc_fd+0x46d/0x600 [ 466.892458][T18856] ? lock_downgrade+0x840/0x840 [ 466.897369][T18856] ? do_raw_spin_lock+0x129/0x2e0 [ 466.902419][T18856] ? _raw_spin_unlock+0x24/0x40 [ 466.907274][T18856] ? __alloc_fd+0x46d/0x600 [ 466.911782][T18856] do_sys_openat2+0x585/0x7d0 [ 466.916488][T18856] ? file_open_root+0x400/0x400 [ 466.921340][T18856] ? __mutex_unlock_slowpath+0xe2/0x660 [ 466.926900][T18856] ? wait_for_completion+0x270/0x270 [ 466.934343][T18856] ? __this_cpu_preempt_check+0x28/0x190 [ 466.939976][T18856] ? __sb_end_write+0x101/0x1d0 [ 466.944871][T18856] do_sys_open+0xc3/0x140 [ 466.949196][T18856] ? filp_open+0x70/0x70 [ 466.953424][T18856] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 466.959422][T18856] ? do_syscall_64+0x21/0x7d0 [ 466.964104][T18856] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 466.970207][T18856] do_syscall_64+0xf6/0x7d0 [ 466.974718][T18856] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 466.980604][T18856] RIP: 0033:0x45ca59 [ 466.984600][T18856] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.004199][T18856] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.012701][T18856] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 467.020677][T18856] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 467.028655][T18856] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 467.036612][T18856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 467.044924][T18856] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 467.071089][ T8725] usb 5-1: USB disconnect, device number 99 [ 467.378101][ T0] NOHZ: local_softirq_pending 08 23:03:58 executing program 4 (fault-call:4 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:03:58 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 467.839057][ T3583] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 467.907119][T14593] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 468.040843][ T2687] usb 3-1: USB disconnect, device number 26 [ 468.069443][ T2687] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 468.101263][ T2687] ch341 3-1:0.0: device disconnected [ 468.167260][T14593] usb 5-1: Using ep0 maxpacket: 8 [ 468.297623][T14593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.311865][T14593] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.321428][T14593] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 468.334532][T14593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.353823][T14593] usb 5-1: config 0 descriptor?? [ 468.604264][T18910] FAULT_INJECTION: forcing a failure. [ 468.604264][T18910] name failslab, interval 1, probability 0, space 0, times 0 [ 468.619166][T18910] CPU: 1 PID: 18910 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 468.627529][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.637611][T18910] Call Trace: [ 468.640911][T18910] dump_stack+0x188/0x20d [ 468.645257][T18910] should_fail.cold+0x5/0xa [ 468.649752][T18910] ? lock_downgrade+0x840/0x840 [ 468.654599][T18910] ? fault_create_debugfs_attr+0x140/0x140 [ 468.660408][T18910] should_failslab+0x5/0xf [ 468.664822][T18910] kmem_cache_alloc+0x29b/0x740 [ 468.669677][T18910] ? kmem_cache_alloc+0x358/0x740 [ 468.674994][T18910] ? mark_lock+0x11f/0xdd0 [ 468.679429][T18910] security_file_alloc+0x34/0x160 [ 468.684683][T18910] __alloc_file+0xd8/0x350 [ 468.689271][T18910] alloc_empty_file+0x6d/0x170 [ 468.694044][T18910] path_openat+0xe3/0x27d0 [ 468.699599][T18910] ? path_lookupat.isra.0+0x530/0x530 [ 468.705145][T18910] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 468.711395][T18910] ? lock_acquire+0x1f2/0x8f0 [ 468.716069][T18910] do_filp_open+0x192/0x260 [ 468.720653][T18910] ? may_open_dev+0xf0/0xf0 [ 468.725385][T18910] ? __alloc_fd+0x46d/0x600 [ 468.730054][T18910] ? lock_downgrade+0x840/0x840 [ 468.735151][T18910] ? do_raw_spin_lock+0x129/0x2e0 [ 468.742756][T18910] ? _raw_spin_unlock+0x24/0x40 [ 468.749324][T18910] ? __alloc_fd+0x46d/0x600 [ 468.754084][T18910] do_sys_openat2+0x585/0x7d0 [ 468.758869][T18910] ? file_open_root+0x400/0x400 [ 468.763729][T18910] ? __mutex_unlock_slowpath+0xe2/0x660 [ 468.769292][T18910] ? wait_for_completion+0x270/0x270 [ 468.774676][T18910] ? __this_cpu_preempt_check+0x28/0x190 [ 468.780441][T18910] ? __sb_end_write+0x101/0x1d0 [ 468.785311][T18910] do_sys_open+0xc3/0x140 [ 468.789633][T18910] ? filp_open+0x70/0x70 [ 468.793890][T18910] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 468.800086][T18910] ? do_syscall_64+0x21/0x7d0 [ 468.804784][T18910] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 468.810792][T18910] do_syscall_64+0xf6/0x7d0 [ 468.815816][T18910] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 468.821712][T18910] RIP: 0033:0x45ca59 [ 468.825651][T18910] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.845256][T18910] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.853747][T18910] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 468.861944][T18910] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 468.869930][T18910] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 468.877898][T18910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 468.885965][T18910] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 468.900504][ T8725] usb 5-1: USB disconnect, device number 100 [ 469.057120][ T3583] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 469.327038][ T3583] usb 3-1: Using ep0 maxpacket: 8 23:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) 23:04:00 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x2, @local}, "1501000000200100"}}}}}, 0x0) 23:04:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:00 executing program 4 (fault-call:4 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 469.427097][ T3583] usb 3-1: device descriptor read/all, error -71 23:04:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x3, @local}, "1501000000200100"}}}}}, 0x0) 23:04:00 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:00 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x4, @local}, "1501000000200100"}}}}}, 0x0) [ 469.777802][ T8725] usb 2-1: new high-speed USB device number 72 using dummy_hcd 23:04:01 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 469.837003][ T2687] usb 5-1: new high-speed USB device number 101 using dummy_hcd 23:04:01 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x6, @local}, "1501000000200100"}}}}}, 0x0) [ 470.017903][ T8725] usb 2-1: Using ep0 maxpacket: 8 23:04:01 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:01 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x7, @local}, "1501000000200100"}}}}}, 0x0) [ 470.087028][ T2687] usb 5-1: Using ep0 maxpacket: 8 [ 470.137359][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 470.167882][ T8725] usb 2-1: config 0 has no interface number 0 [ 470.201120][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 470.214420][ T2687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.243731][ T2687] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 470.284605][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 470.301749][ T2687] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 470.337242][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 470.350619][ T2687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.383945][ T2687] usb 5-1: config 0 descriptor?? [ 470.393481][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 470.423811][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 470.471652][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.485544][ T8725] usb 2-1: config 0 descriptor?? [ 470.517572][T18955] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.580384][ T8725] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 470.668907][T18959] FAULT_INJECTION: forcing a failure. [ 470.668907][T18959] name failslab, interval 1, probability 0, space 0, times 0 [ 470.702945][T18959] CPU: 1 PID: 18959 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 470.711329][T18959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.721540][T18959] Call Trace: [ 470.724847][T18959] dump_stack+0x188/0x20d [ 470.729289][T18959] should_fail.cold+0x5/0xa [ 470.733857][T18959] ? fault_create_debugfs_attr+0x140/0x140 [ 470.739692][T18959] should_failslab+0x5/0xf [ 470.744740][T18959] __kmalloc+0x2d9/0x7a0 [ 470.749003][T18959] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 470.755089][T18959] ? tomoyo_realpath_from_path+0xc2/0x620 [ 470.760851][T18959] ? lock_release+0x800/0x800 [ 470.765574][T18959] ? print_usage_bug+0x240/0x240 [ 470.770554][T18959] tomoyo_realpath_from_path+0xc2/0x620 [ 470.776187][T18959] tomoyo_check_open_permission+0x26d/0x370 [ 470.782101][T18959] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 470.787753][T18959] ? __lock_acquire+0xc6c/0x48a0 [ 470.792735][T18959] ? lock_downgrade+0x840/0x840 [ 470.797598][T18959] ? do_raw_spin_lock+0x129/0x2e0 [ 470.802726][T18959] tomoyo_file_open+0xa3/0xd0 [ 470.807591][T18959] security_file_open+0x6e/0x410 [ 470.812547][T18959] do_dentry_open+0x3e9/0x1340 [ 470.817328][T18959] ? devcgroup_check_permission+0x1a8/0x420 [ 470.823234][T18959] ? security_inode_permission+0xc4/0xf0 [ 470.828971][T18959] ? chown_common+0x550/0x550 [ 470.833661][T18959] ? inode_permission+0xab/0x500 [ 470.838623][T18959] path_openat+0x1e59/0x27d0 [ 470.843239][T18959] ? path_lookupat.isra.0+0x530/0x530 [ 470.848628][T18959] ? lock_acquire+0x1f2/0x8f0 [ 470.853344][T18959] do_filp_open+0x192/0x260 [ 470.858032][T18959] ? may_open_dev+0xf0/0xf0 [ 470.862561][T18959] ? do_raw_spin_lock+0x129/0x2e0 [ 470.867613][T18959] ? _raw_spin_unlock+0x24/0x40 [ 470.872477][T18959] ? __alloc_fd+0x46d/0x600 [ 470.877008][T18959] do_sys_openat2+0x585/0x7d0 [ 470.881709][T18959] ? file_open_root+0x400/0x400 [ 470.886572][T18959] ? __mutex_unlock_slowpath+0xe2/0x660 [ 470.892136][T18959] ? wait_for_completion+0x270/0x270 [ 470.897473][T18959] ? __this_cpu_preempt_check+0x28/0x190 [ 470.903128][T18959] ? __sb_end_write+0x101/0x1d0 [ 470.908001][T18959] do_sys_open+0xc3/0x140 [ 470.912354][T18959] ? filp_open+0x70/0x70 [ 470.916709][T18959] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 470.922716][T18959] ? do_syscall_64+0x21/0x7d0 [ 470.927455][T18959] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 470.933469][T18959] do_syscall_64+0xf6/0x7d0 [ 470.938004][T18959] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 470.943996][T18959] RIP: 0033:0x45ca59 [ 470.947910][T18959] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.967694][T18959] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.976118][T18959] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 470.984100][T18959] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 470.992087][T18959] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 471.000066][T18959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 471.008051][T18959] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 471.034790][T14593] usb 2-1: USB disconnect, device number 72 [ 471.074592][T18959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.088021][ T3562] usb 5-1: USB disconnect, device number 101 23:04:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) 23:04:02 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r3, 0x6, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r3, 0xfc91, 0x8}, 0xc) 23:04:02 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x8, @local}, "1501000000200100"}}}}}, 0x0) 23:04:02 executing program 4 (fault-call:4 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xb, @local}, "1501000000200100"}}}}}, 0x0) 23:04:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000a10f226c1a975f3dcd43d66cbeae7d59f88b474957544811b8af5c8666d6dc3778aec0f7945dd83fd02bda0871bf114d4683fd9c45dcc951b4ffe2cab0c0c5025ce8da6ea9ff148ce335cbd9cbd339e76d265007411359ff4e183e5ae70c7d", @ANYRES16=r2, @ANYBLOB="270000000000000000000100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x4000, 0x10000, 0x4, 0x4000], 0xfffffffffffffbff, 0x0, 0x5}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="ff0100000000000000000000000000000000000000000000010000000000000046000000000000001f00"/88]) 23:04:02 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:03 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:03 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xf, @local}, "1501000000200100"}}}}}, 0x0) [ 471.886940][ T3562] usb 2-1: new high-speed USB device number 73 using dummy_hcd 23:04:03 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x24, @local}, "1501000000200100"}}}}}, 0x0) [ 471.987487][ T3583] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 472.126970][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 472.229413][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 472.247808][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.247826][ T3562] usb 2-1: config 0 has no interface number 0 [ 472.247870][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 472.247890][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 472.247908][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 472.247924][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 472.247951][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 472.247967][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.249273][ T3562] usb 2-1: config 0 descriptor?? [ 472.417471][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.441771][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.462996][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 472.490433][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.519634][ T3583] usb 5-1: config 0 descriptor?? [ 472.564117][T19008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 472.638031][ T3562] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 472.782659][T19016] FAULT_INJECTION: forcing a failure. [ 472.782659][T19016] name failslab, interval 1, probability 0, space 0, times 0 [ 472.814785][T19016] CPU: 1 PID: 19016 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 472.820431][ T3562] usb 2-1: USB disconnect, device number 73 [ 472.823199][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.823229][T19016] Call Trace: [ 472.823249][T19016] dump_stack+0x188/0x20d [ 472.823272][T19016] should_fail.cold+0x5/0xa [ 472.851347][T19016] ? fault_create_debugfs_attr+0x140/0x140 [ 472.857182][T19016] should_failslab+0x5/0xf [ 472.861787][T19016] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 472.867182][T19016] ? find_held_lock+0x2d/0x110 [ 472.871966][T19016] ? lock_downgrade+0x840/0x840 [ 472.877011][T19016] snd_seq_oss_open+0x50/0x980 [ 472.881800][T19016] odev_open+0x6c/0x90 [ 472.885923][T19016] ? odev_release+0x70/0x70 [ 472.890609][T19016] soundcore_open+0x446/0x600 [ 472.895353][T19016] ? sound_devnode+0xf0/0xf0 [ 472.899952][T19016] chrdev_open+0x219/0x5c0 [ 472.904363][T19016] ? cdev_put.part.0+0x50/0x50 [ 472.909119][T19016] ? security_file_open+0x84/0x410 [ 472.914853][T19016] do_dentry_open+0x546/0x1340 [ 472.919789][T19016] ? cdev_put.part.0+0x50/0x50 [ 472.924559][T19016] ? security_inode_permission+0xc4/0xf0 [ 472.930188][T19016] ? chown_common+0x550/0x550 [ 472.934877][T19016] ? inode_permission+0xab/0x500 [ 472.939999][T19016] path_openat+0x1e59/0x27d0 [ 472.944655][T19016] ? path_lookupat.isra.0+0x530/0x530 [ 472.950422][T19016] do_filp_open+0x192/0x260 [ 472.954934][T19016] ? may_open_dev+0xf0/0xf0 [ 472.959437][T19016] ? do_raw_spin_lock+0x129/0x2e0 [ 472.964457][T19016] ? _raw_spin_unlock+0x24/0x40 [ 472.969311][T19016] ? __alloc_fd+0x46d/0x600 [ 472.973804][T19016] do_sys_openat2+0x585/0x7d0 [ 472.978808][T19016] ? file_open_root+0x400/0x400 [ 472.983770][T19016] ? __mutex_unlock_slowpath+0xe2/0x660 [ 472.989328][T19016] ? wait_for_completion+0x270/0x270 [ 472.994617][T19016] ? __this_cpu_preempt_check+0x28/0x190 [ 473.000238][T19016] ? __sb_end_write+0x101/0x1d0 [ 473.005088][T19016] do_sys_open+0xc3/0x140 [ 473.009407][T19016] ? filp_open+0x70/0x70 [ 473.013649][T19016] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 473.019624][T19016] ? do_syscall_64+0x21/0x7d0 [ 473.024286][T19016] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 473.030267][T19016] do_syscall_64+0xf6/0x7d0 [ 473.034767][T19016] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 473.040765][T19016] RIP: 0033:0x45ca59 [ 473.044670][T19016] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.064258][T19016] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.072670][T19016] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 473.080631][T19016] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 473.088612][T19016] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 473.096568][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 473.104539][T19016] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 473.125471][ T8725] usb 5-1: USB disconnect, device number 102 23:04:04 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:04 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x38, @local}, "1501000000200100"}}}}}, 0x0) 23:04:04 executing program 2: r0 = getpgrp(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x11040, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40002, 0x0, 0x0, 0x4, 0x3}, r2, 0x10, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() clone(0x282a1500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x0, 0x0) 23:04:04 executing program 4 (fault-call:4 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:04 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x300, @local}, "1501000000200100"}}}}}, 0x0) 23:04:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2, 0x1, {0x1, 0xff, 0x4}, 0xff}, 0x18) r4 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r5 = accept4$packet(r0, 0x0, &(0x7f0000000000), 0x1000) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000180)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 23:04:04 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:05 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x600, @local}, "1501000000200100"}}}}}, 0x0) 23:04:05 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:05 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x700, @local}, "1501000000200100"}}}}}, 0x0) 23:04:05 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) [ 474.086868][ T2687] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 474.094639][ T8725] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 474.347191][ T2687] usb 2-1: Using ep0 maxpacket: 8 [ 474.366890][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 474.476866][ T2687] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 474.485055][ T2687] usb 2-1: config 0 has no interface number 0 [ 474.492973][ T2687] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 474.505875][ T8725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.516102][ T2687] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 474.527923][ T8725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.538747][ T2687] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 474.549942][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 474.559824][ T2687] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 474.569624][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.578621][ T2687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.588780][ T8725] usb 5-1: config 0 descriptor?? [ 474.602275][ T2687] usb 2-1: config 0 descriptor?? [ 474.637202][T19088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 474.644407][T19088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 474.835890][T19087] FAULT_INJECTION: forcing a failure. [ 474.835890][T19087] name failslab, interval 1, probability 0, space 0, times 0 [ 474.877008][T19087] CPU: 0 PID: 19087 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 474.885374][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.896623][T19087] Call Trace: [ 474.899923][T19087] dump_stack+0x188/0x20d [ 474.904280][T19087] should_fail.cold+0x5/0xa [ 474.908792][T19087] ? fault_create_debugfs_attr+0x140/0x140 [ 474.914811][T19087] ? get_fs_root_and_pwd_rcu.isra.0+0x3a0/0x3a0 [ 474.921970][T19087] should_failslab+0x5/0xf [ 474.926379][T19087] __kmalloc+0x2d9/0x7a0 [ 474.930628][T19087] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 474.936094][T19087] ? d_absolute_path+0x10c/0x160 [ 474.941023][T19087] ? __d_path+0x140/0x140 [ 474.945447][T19087] tomoyo_encode2.part.0+0xec/0x3b0 [ 474.950640][T19087] tomoyo_encode+0x28/0x50 [ 474.955061][T19087] tomoyo_realpath_from_path+0x184/0x620 [ 474.960878][T19087] tomoyo_check_open_permission+0x26d/0x370 [ 474.966766][T19087] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 474.972387][T19087] ? __lock_acquire+0xc6c/0x48a0 [ 474.977351][T19087] ? lock_downgrade+0x840/0x840 [ 474.982187][T19087] ? do_raw_spin_lock+0x129/0x2e0 [ 474.987220][T19087] tomoyo_file_open+0xa3/0xd0 [ 474.992101][T19087] security_file_open+0x6e/0x410 [ 474.997033][T19087] do_dentry_open+0x3e9/0x1340 [ 475.001791][T19087] ? devcgroup_check_permission+0x1a8/0x420 [ 475.007687][T19087] ? security_inode_permission+0xc4/0xf0 [ 475.013395][T19087] ? chown_common+0x550/0x550 [ 475.018061][T19087] ? inode_permission+0xab/0x500 [ 475.023012][T19087] path_openat+0x1e59/0x27d0 [ 475.027612][T19087] ? path_lookupat.isra.0+0x530/0x530 [ 475.032996][T19087] ? lock_acquire+0x1f2/0x8f0 [ 475.037678][T19087] do_filp_open+0x192/0x260 [ 475.042186][T19087] ? may_open_dev+0xf0/0xf0 [ 475.046689][T19087] ? do_raw_spin_lock+0x129/0x2e0 [ 475.051732][T19087] ? _raw_spin_unlock+0x24/0x40 [ 475.056567][T19087] ? __alloc_fd+0x46d/0x600 [ 475.061101][T19087] do_sys_openat2+0x585/0x7d0 [ 475.065798][T19087] ? file_open_root+0x400/0x400 [ 475.070639][T19087] ? __mutex_unlock_slowpath+0xe2/0x660 [ 475.076192][T19087] ? wait_for_completion+0x270/0x270 [ 475.081507][T19087] ? __this_cpu_preempt_check+0x28/0x190 [ 475.087150][T19087] ? __sb_end_write+0x101/0x1d0 [ 475.091998][T19087] do_sys_open+0xc3/0x140 [ 475.096361][T19087] ? filp_open+0x70/0x70 [ 475.100598][T19087] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 475.106567][T19087] ? do_syscall_64+0x21/0x7d0 [ 475.111238][T19087] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 475.117212][T19087] do_syscall_64+0xf6/0x7d0 [ 475.121723][T19087] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 475.127688][T19087] RIP: 0033:0x45ca59 [ 475.131589][T19087] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.151196][T19087] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.159610][T19087] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 475.168631][T19087] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 475.176762][T19087] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 475.184719][T19087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 475.192956][T19087] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 475.338457][T19087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.354679][ T2687] usb 5-1: USB disconnect, device number 103 23:04:07 executing program 4 (fault-call:4 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 476.636639][ T3583] usb 5-1: new high-speed USB device number 104 using dummy_hcd 23:04:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xb00, @local}, "1501000000200100"}}}}}, 0x0) 23:04:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:07 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) [ 476.698324][ T3562] usb 2-1: USB disconnect, device number 74 23:04:08 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xf00, @local}, "1501000000200100"}}}}}, 0x0) 23:04:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 476.876807][ T3583] usb 5-1: Using ep0 maxpacket: 8 23:04:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x2400, @local}, "1501000000200100"}}}}}, 0x0) [ 476.997691][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.019684][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.030704][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 23:04:08 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 477.041841][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.052685][ T3583] usb 5-1: config 0 descriptor?? [ 477.187825][ T3562] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 477.311175][T19148] FAULT_INJECTION: forcing a failure. [ 477.311175][T19148] name failslab, interval 1, probability 0, space 0, times 0 [ 477.328649][T19148] CPU: 0 PID: 19148 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 477.337001][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.347062][T19148] Call Trace: [ 477.350374][T19148] dump_stack+0x188/0x20d [ 477.354722][T19148] should_fail.cold+0x5/0xa [ 477.359241][T19148] ? fault_create_debugfs_attr+0x140/0x140 [ 477.365078][T19148] should_failslab+0x5/0xf [ 477.369506][T19148] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 477.374913][T19148] ? find_held_lock+0x2d/0x110 [ 477.379717][T19148] ? lock_downgrade+0x840/0x840 [ 477.384582][T19148] snd_seq_oss_open+0x50/0x980 [ 477.389368][T19148] odev_open+0x6c/0x90 [ 477.393445][T19148] ? odev_release+0x70/0x70 [ 477.397958][T19148] soundcore_open+0x446/0x600 [ 477.402657][T19148] ? sound_devnode+0xf0/0xf0 [ 477.407260][T19148] chrdev_open+0x219/0x5c0 [ 477.411691][T19148] ? cdev_put.part.0+0x50/0x50 [ 477.416466][T19148] ? security_file_open+0x84/0x410 [ 477.422634][T19148] do_dentry_open+0x546/0x1340 [ 477.427414][T19148] ? cdev_put.part.0+0x50/0x50 [ 477.432190][T19148] ? security_inode_permission+0xc4/0xf0 [ 477.437834][T19148] ? chown_common+0x550/0x550 [ 477.442525][T19148] ? inode_permission+0xab/0x500 [ 477.447500][T19148] path_openat+0x1e59/0x27d0 [ 477.452251][T19148] ? path_lookupat.isra.0+0x530/0x530 [ 477.457644][T19148] ? lock_acquire+0x1f2/0x8f0 [ 477.462346][T19148] do_filp_open+0x192/0x260 [ 477.467469][T19148] ? may_open_dev+0xf0/0xf0 [ 477.471999][T19148] ? do_raw_spin_lock+0x129/0x2e0 [ 477.477223][T19148] ? _raw_spin_unlock+0x24/0x40 [ 477.482092][T19148] ? __alloc_fd+0x46d/0x600 [ 477.486728][T19148] do_sys_openat2+0x585/0x7d0 [ 477.491510][T19148] ? file_open_root+0x400/0x400 [ 477.496388][T19148] ? __mutex_unlock_slowpath+0xe2/0x660 [ 477.501947][T19148] ? wait_for_completion+0x270/0x270 [ 477.507245][T19148] ? __this_cpu_preempt_check+0x28/0x190 [ 477.512980][T19148] ? __sb_end_write+0x101/0x1d0 [ 477.517879][T19148] do_sys_open+0xc3/0x140 [ 477.522227][T19148] ? filp_open+0x70/0x70 [ 477.526483][T19148] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 477.532483][T19148] ? do_syscall_64+0x21/0x7d0 [ 477.537306][T19148] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 477.544964][T19148] do_syscall_64+0xf6/0x7d0 [ 477.549488][T19148] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 477.556023][T19148] RIP: 0033:0x45ca59 [ 477.559925][T19148] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.579538][T19148] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 477.587963][T19148] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 477.595946][T19148] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 477.603928][T19148] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 477.611908][T19148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 477.619898][T19148] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 477.686906][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 477.692392][ T2687] usb 5-1: USB disconnect, device number 104 [ 477.806725][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 477.815244][ T3562] usb 2-1: config 0 has no interface number 0 [ 477.836572][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 477.849495][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 477.860627][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 477.878293][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 477.897869][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.908627][ T3562] usb 2-1: config 0 descriptor?? [ 477.928282][T19179] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 477.935373][T19179] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 478.175832][ T3562] usb 2-1: USB disconnect, device number 75 23:04:09 executing program 4 (fault-call:4 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 478.546493][ T3583] usb 5-1: new high-speed USB device number 105 using dummy_hcd 23:04:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100df50f31fbd8ac80e00c56700000001090224000100000000090009058c0a0800000400"/50], 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4), 0x0, 0xfffffffffffffff7, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000040)={0x990000, 0x4, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a2d, 0x400, [], @value=0xff}}) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 23:04:09 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x3800, @local}, "1501000000200100"}}}}}, 0x0) 23:04:09 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:09 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 23:04:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x4000, @local}, "1501000000200100"}}}}}, 0x0) [ 478.786578][ T3583] usb 5-1: Using ep0 maxpacket: 8 23:04:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x1000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:10 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 478.907367][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.933636][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 23:04:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x2000000, @local}, "1501000000200100"}}}}}, 0x0) [ 478.973014][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 23:04:10 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 479.021568][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.064296][ T3583] usb 5-1: config 0 descriptor?? 23:04:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x3000000, @local}, "1501000000200100"}}}}}, 0x0) [ 479.246700][ T2506] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 479.331691][T19248] FAULT_INJECTION: forcing a failure. [ 479.331691][T19248] name failslab, interval 1, probability 0, space 0, times 0 [ 479.386740][T19248] CPU: 0 PID: 19248 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 479.395101][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.405166][T19248] Call Trace: [ 479.408476][T19248] dump_stack+0x188/0x20d [ 479.412828][T19248] should_fail.cold+0x5/0xa [ 479.417365][T19248] ? fault_create_debugfs_attr+0x140/0x140 [ 479.423199][T19248] should_failslab+0x5/0xf [ 479.427649][T19248] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 479.433120][T19248] ? lockdep_init_map_waits+0x26a/0x890 [ 479.438673][T19248] ? lockdep_init_map_waits+0x26a/0x890 [ 479.444460][T19248] snd_seq_prioq_new+0x3c/0x120 [ 479.449339][T19248] snd_seq_queue_alloc+0x12f/0x4d0 [ 479.454537][T19248] snd_seq_ioctl_create_queue+0xab/0x320 [ 479.460280][T19248] ? async_call_lookup_ports+0x10/0x10 [ 479.465840][T19248] snd_seq_kernel_client_ctl+0xeb/0x130 [ 479.471439][T19248] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 479.476767][T19248] ? delete_port+0xc0/0xc0 [ 479.481213][T19248] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 479.486804][T19248] ? find_held_lock+0x2d/0x110 [ 479.491598][T19248] snd_seq_oss_open+0x2fe/0x980 [ 479.496500][T19248] odev_open+0x6c/0x90 [ 479.500579][T19248] ? odev_release+0x70/0x70 [ 479.505083][T19248] soundcore_open+0x446/0x600 [ 479.509873][T19248] ? sound_devnode+0xf0/0xf0 [ 479.514465][T19248] chrdev_open+0x219/0x5c0 [ 479.518892][T19248] ? cdev_put.part.0+0x50/0x50 [ 479.523664][T19248] ? security_file_open+0x84/0x410 [ 479.529921][T19248] do_dentry_open+0x546/0x1340 [ 479.534836][T19248] ? cdev_put.part.0+0x50/0x50 [ 479.539605][T19248] ? security_inode_permission+0xc4/0xf0 [ 479.545271][T19248] ? chown_common+0x550/0x550 [ 479.549950][T19248] ? inode_permission+0xab/0x500 [ 479.554886][T19248] path_openat+0x1e59/0x27d0 [ 479.559477][T19248] ? path_lookupat.isra.0+0x530/0x530 [ 479.564874][T19248] do_filp_open+0x192/0x260 [ 479.569383][T19248] ? may_open_dev+0xf0/0xf0 [ 479.573910][T19248] ? do_raw_spin_lock+0x129/0x2e0 [ 479.578961][T19248] ? _raw_spin_unlock+0x24/0x40 [ 479.583796][T19248] ? __alloc_fd+0x46d/0x600 [ 479.588291][T19248] do_sys_openat2+0x585/0x7d0 [ 479.592955][T19248] ? file_open_root+0x400/0x400 [ 479.598025][T19248] ? __mutex_unlock_slowpath+0xe2/0x660 [ 479.603695][T19248] ? wait_for_completion+0x270/0x270 [ 479.608968][T19248] ? __this_cpu_preempt_check+0x28/0x190 [ 479.614584][T19248] ? __sb_end_write+0x101/0x1d0 [ 479.619435][T19248] do_sys_open+0xc3/0x140 [ 479.623786][T19248] ? filp_open+0x70/0x70 [ 479.628044][T19248] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 479.634020][T19248] ? do_syscall_64+0x21/0x7d0 [ 479.638714][T19248] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 479.644681][T19248] do_syscall_64+0xf6/0x7d0 [ 479.649195][T19248] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 479.655070][T19248] RIP: 0033:0x45ca59 [ 479.658952][T19248] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.678913][T19248] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.687491][T19248] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 479.695599][T19248] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 479.703584][T19248] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 479.711556][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 479.719515][T19248] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 479.746074][ T3583] usb 5-1: USB disconnect, device number 105 [ 479.886714][ T2506] usb 2-1: device descriptor read/64, error 18 [ 480.188304][ T0] NOHZ: local_softirq_pending 08 23:04:11 executing program 4 (fault-call:4 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 480.276408][ T2506] usb 2-1: device descriptor read/64, error 18 [ 480.546489][ T2506] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 480.576434][ T3562] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 480.817810][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 480.823192][ T2506] usb 2-1: device descriptor read/64, error 18 [ 480.936532][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.947002][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.957241][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 480.967004][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.980355][ T3562] usb 5-1: config 0 descriptor?? [ 481.216417][ T2506] usb 2-1: device descriptor read/64, error 18 [ 481.221962][T19293] FAULT_INJECTION: forcing a failure. [ 481.221962][T19293] name failslab, interval 1, probability 0, space 0, times 0 [ 481.237370][T19293] CPU: 1 PID: 19293 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 481.245795][T19293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.255944][T19293] Call Trace: [ 481.259345][T19293] dump_stack+0x188/0x20d [ 481.263705][T19293] should_fail.cold+0x5/0xa [ 481.268210][T19293] ? fault_create_debugfs_attr+0x140/0x140 [ 481.274213][T19293] should_failslab+0x5/0xf [ 481.278710][T19293] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 481.284075][T19293] ? lockdep_init_map_waits+0x26a/0x890 [ 481.289611][T19293] snd_seq_prioq_new+0x3c/0x120 [ 481.294447][T19293] snd_seq_queue_alloc+0x159/0x4d0 [ 481.299558][T19293] snd_seq_ioctl_create_queue+0xab/0x320 [ 481.305183][T19293] ? async_call_lookup_ports+0x10/0x10 [ 481.310647][T19293] snd_seq_kernel_client_ctl+0xeb/0x130 [ 481.316179][T19293] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 481.321461][T19293] ? delete_port+0xc0/0xc0 [ 481.325897][T19293] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 481.331538][T19293] ? find_held_lock+0x2d/0x110 [ 481.336308][T19293] snd_seq_oss_open+0x2fe/0x980 [ 481.336648][ T2506] usb usb2-port1: attempt power cycle [ 481.341157][T19293] odev_open+0x6c/0x90 [ 481.350619][T19293] ? odev_release+0x70/0x70 [ 481.355123][T19293] soundcore_open+0x446/0x600 [ 481.359804][T19293] ? sound_devnode+0xf0/0xf0 [ 481.364406][T19293] chrdev_open+0x219/0x5c0 [ 481.368843][T19293] ? cdev_put.part.0+0x50/0x50 [ 481.373605][T19293] ? security_file_open+0x84/0x410 [ 481.378899][T19293] do_dentry_open+0x546/0x1340 [ 481.383745][T19293] ? cdev_put.part.0+0x50/0x50 [ 481.388551][T19293] ? security_inode_permission+0xc4/0xf0 [ 481.394180][T19293] ? chown_common+0x550/0x550 [ 481.398954][T19293] ? inode_permission+0xab/0x500 [ 481.403877][T19293] path_openat+0x1e59/0x27d0 [ 481.408472][T19293] ? path_lookupat.isra.0+0x530/0x530 [ 481.414067][T19293] do_filp_open+0x192/0x260 [ 481.418729][T19293] ? may_open_dev+0xf0/0xf0 [ 481.424093][T19293] ? do_raw_spin_lock+0x129/0x2e0 [ 481.429134][T19293] ? _raw_spin_unlock+0x24/0x40 [ 481.434031][T19293] ? __alloc_fd+0x46d/0x600 [ 481.438533][T19293] do_sys_openat2+0x585/0x7d0 [ 481.443375][T19293] ? file_open_root+0x400/0x400 [ 481.448218][T19293] ? __mutex_unlock_slowpath+0xe2/0x660 [ 481.453821][T19293] ? wait_for_completion+0x270/0x270 [ 481.459089][T19293] ? __this_cpu_preempt_check+0x28/0x190 [ 481.464727][T19293] ? __sb_end_write+0x101/0x1d0 [ 481.469586][T19293] do_sys_open+0xc3/0x140 [ 481.473939][T19293] ? filp_open+0x70/0x70 [ 481.478165][T19293] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 481.484143][T19293] ? do_syscall_64+0x21/0x7d0 [ 481.488871][T19293] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 481.494860][T19293] do_syscall_64+0xf6/0x7d0 [ 481.499367][T19293] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 481.505264][T19293] RIP: 0033:0x45ca59 [ 481.509494][T19293] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.532852][T19293] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.541262][T19293] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 481.549227][T19293] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 481.557212][T19293] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 481.565165][T19293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 481.573129][T19293] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 481.591731][ T3562] usb 5-1: USB disconnect, device number 106 23:04:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x4000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, r3+30000000}}, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f0000000100)={{}, {0x0, r8+30000000}}, 0x0) r9 = dup3(r6, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f0000000000)={0x2001}) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4], 0x0) 23:04:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 23:04:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x6000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:13 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x7000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:13 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x8000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:13 executing program 4 (fault-call:4 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xb000000, @local}, "1501000000200100"}}}}}, 0x0) [ 482.286544][ T2506] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 482.456570][ T2506] usb 2-1: device descriptor read/8, error -61 [ 482.516925][ T3583] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 482.726454][ T2506] usb 2-1: device descriptor read/8, error -61 [ 482.756431][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 482.886514][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.896861][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.908516][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 482.918505][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.931467][ T3583] usb 5-1: config 0 descriptor?? [ 482.996432][ T2506] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 483.166486][ T2506] usb 2-1: device descriptor read/8, error -61 [ 483.189836][T19338] FAULT_INJECTION: forcing a failure. [ 483.189836][T19338] name failslab, interval 1, probability 0, space 0, times 0 [ 483.204038][T19338] CPU: 1 PID: 19338 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 483.212503][T19338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.222550][T19338] Call Trace: [ 483.225864][T19338] dump_stack+0x188/0x20d [ 483.230213][T19338] should_fail.cold+0x5/0xa [ 483.234738][T19338] ? fault_create_debugfs_attr+0x140/0x140 [ 483.240560][T19338] should_failslab+0x5/0xf [ 483.244975][T19338] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 483.250368][T19338] ? lockdep_init_map_waits+0x26a/0x890 [ 483.255991][T19338] snd_seq_timer_new+0x38/0x90 [ 483.260754][T19338] snd_seq_queue_alloc+0x17e/0x4d0 [ 483.265943][T19338] snd_seq_ioctl_create_queue+0xab/0x320 [ 483.271559][T19338] ? async_call_lookup_ports+0x10/0x10 [ 483.277186][T19338] snd_seq_kernel_client_ctl+0xeb/0x130 [ 483.282732][T19338] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 483.288101][T19338] ? delete_port+0xc0/0xc0 [ 483.292523][T19338] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 483.298341][T19338] ? find_held_lock+0x2d/0x110 [ 483.303095][T19338] snd_seq_oss_open+0x2fe/0x980 [ 483.307934][T19338] odev_open+0x6c/0x90 [ 483.311997][T19338] ? odev_release+0x70/0x70 [ 483.316483][T19338] soundcore_open+0x446/0x600 [ 483.321162][T19338] ? sound_devnode+0xf0/0xf0 [ 483.326692][T19338] chrdev_open+0x219/0x5c0 [ 483.331105][T19338] ? cdev_put.part.0+0x50/0x50 [ 483.335857][T19338] ? security_file_open+0x84/0x410 [ 483.340968][T19338] do_dentry_open+0x546/0x1340 [ 483.345716][T19338] ? cdev_put.part.0+0x50/0x50 [ 483.350478][T19338] ? security_inode_permission+0xc4/0xf0 [ 483.356091][T19338] ? chown_common+0x550/0x550 [ 483.360750][T19338] ? inode_permission+0xab/0x500 [ 483.365741][T19338] path_openat+0x1e59/0x27d0 [ 483.370355][T19338] ? path_lookupat.isra.0+0x530/0x530 [ 483.375738][T19338] do_filp_open+0x192/0x260 [ 483.380256][T19338] ? may_open_dev+0xf0/0xf0 [ 483.384839][T19338] ? do_raw_spin_lock+0x129/0x2e0 [ 483.389856][T19338] ? _raw_spin_unlock+0x24/0x40 [ 483.394705][T19338] ? __alloc_fd+0x46d/0x600 [ 483.399398][T19338] do_sys_openat2+0x585/0x7d0 [ 483.404072][T19338] ? file_open_root+0x400/0x400 [ 483.408920][T19338] ? __mutex_unlock_slowpath+0xe2/0x660 [ 483.414458][T19338] ? wait_for_completion+0x270/0x270 [ 483.419740][T19338] ? __this_cpu_preempt_check+0x28/0x190 [ 483.425357][T19338] ? __sb_end_write+0x101/0x1d0 [ 483.430193][T19338] do_sys_open+0xc3/0x140 [ 483.434525][T19338] ? filp_open+0x70/0x70 [ 483.438768][T19338] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 483.444918][T19338] ? do_syscall_64+0x21/0x7d0 [ 483.449593][T19338] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 483.455561][T19338] do_syscall_64+0xf6/0x7d0 [ 483.460054][T19338] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 483.465930][T19338] RIP: 0033:0x45ca59 [ 483.469809][T19338] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.489745][T19338] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.498165][T19338] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 483.506120][T19338] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 483.514095][T19338] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 483.522050][T19338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 483.530016][T19338] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 483.569236][ T3562] usb 5-1: USB disconnect, device number 107 [ 483.656442][ T2506] usb 2-1: device descriptor read/8, error -61 [ 483.779155][ T2506] usb usb2-port1: unable to enumerate USB device 23:04:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) sendfile(r1, r4, &(0x7f0000000080)=0x8000, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/118) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:16 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:16 executing program 4 (fault-call:4 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xf000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:16 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x24000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:16 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x38000000, @local}, "1501000000200100"}}}}}, 0x0) [ 485.176228][ T2506] usb 5-1: new high-speed USB device number 108 using dummy_hcd 23:04:16 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x40000000, @local}, "1501000000200100"}}}}}, 0x0) 23:04:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 485.316286][ T3562] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 485.456302][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 485.576116][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 485.596815][ T2506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.642600][ T2506] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.689157][ T2506] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 485.706420][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 485.714718][ T3562] usb 2-1: config 0 has no interface number 0 [ 485.730103][ T2506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.739529][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 485.761397][ T2506] usb 5-1: config 0 descriptor?? [ 485.769983][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 485.795977][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 485.814307][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 485.825836][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.847053][ T3562] usb 2-1: config 0 descriptor?? [ 485.866698][T19380] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 485.873907][T19380] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.029312][T19370] FAULT_INJECTION: forcing a failure. [ 486.029312][T19370] name failslab, interval 1, probability 0, space 0, times 0 [ 486.086351][T19370] CPU: 1 PID: 19370 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 486.094735][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.104853][T19370] Call Trace: [ 486.108259][T19370] dump_stack+0x188/0x20d [ 486.112761][T19370] should_fail.cold+0x5/0xa [ 486.117267][T19370] ? fault_create_debugfs_attr+0x140/0x140 [ 486.123243][T19370] should_failslab+0x5/0xf [ 486.127965][T19370] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 486.133350][T19370] ? mark_lock+0x11f/0xdd0 [ 486.138108][T19370] snd_timer_instance_new+0x44/0x2f0 [ 486.143385][T19370] snd_seq_timer_open+0x1a5/0x530 [ 486.148575][T19370] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 486.153944][T19370] ? mark_held_locks+0x9f/0xe0 [ 486.159013][T19370] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 486.164824][T19370] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 486.171108][T19370] queue_use+0xe6/0x250 [ 486.175263][T19370] snd_seq_queue_alloc+0x2c6/0x4d0 [ 486.180382][T19370] snd_seq_ioctl_create_queue+0xab/0x320 [ 486.186164][T19370] ? async_call_lookup_ports+0x10/0x10 [ 486.192025][T19370] snd_seq_kernel_client_ctl+0xeb/0x130 [ 486.197658][T19370] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 486.203910][T19370] ? delete_port+0xc0/0xc0 [ 486.208359][T19370] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 486.213920][T19370] ? find_held_lock+0x2d/0x110 [ 486.218707][T19370] snd_seq_oss_open+0x2fe/0x980 [ 486.223577][T19370] odev_open+0x6c/0x90 [ 486.227656][T19370] ? odev_release+0x70/0x70 [ 486.232168][T19370] soundcore_open+0x446/0x600 [ 486.236874][T19370] ? sound_devnode+0xf0/0xf0 [ 486.241476][T19370] chrdev_open+0x219/0x5c0 [ 486.245992][T19370] ? cdev_put.part.0+0x50/0x50 [ 486.250784][T19370] ? security_file_open+0x84/0x410 [ 486.255910][T19370] do_dentry_open+0x546/0x1340 [ 486.260690][T19370] ? cdev_put.part.0+0x50/0x50 [ 486.265499][T19370] ? security_inode_permission+0xc4/0xf0 [ 486.271147][T19370] ? chown_common+0x550/0x550 [ 486.275841][T19370] ? inode_permission+0xab/0x500 [ 486.280807][T19370] path_openat+0x1e59/0x27d0 [ 486.285423][T19370] ? path_lookupat.isra.0+0x530/0x530 [ 486.290852][T19370] do_filp_open+0x192/0x260 [ 486.296070][T19370] ? may_open_dev+0xf0/0xf0 [ 486.300619][T19370] ? do_raw_spin_lock+0x129/0x2e0 [ 486.305787][T19370] ? _raw_spin_unlock+0x24/0x40 [ 486.310647][T19370] ? __alloc_fd+0x46d/0x600 [ 486.315161][T19370] do_sys_openat2+0x585/0x7d0 [ 486.320826][T19370] ? file_open_root+0x400/0x400 [ 486.325693][T19370] ? __mutex_unlock_slowpath+0xe2/0x660 [ 486.331255][T19370] ? wait_for_completion+0x270/0x270 [ 486.336807][T19370] ? __this_cpu_preempt_check+0x28/0x190 [ 486.342454][T19370] ? __sb_end_write+0x101/0x1d0 [ 486.347332][T19370] do_sys_open+0xc3/0x140 [ 486.351679][T19370] ? filp_open+0x70/0x70 [ 486.355948][T19370] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 486.362007][T19370] ? do_syscall_64+0x21/0x7d0 [ 486.366711][T19370] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 486.372740][T19370] do_syscall_64+0xf6/0x7d0 [ 486.377260][T19370] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 486.383167][T19370] RIP: 0033:0x45ca59 [ 486.387054][T19370] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.406951][T19370] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.415373][T19370] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 486.423364][T19370] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 486.431529][T19370] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.439542][T19370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 486.447522][T19370] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 486.500422][ T3562] usb 5-1: USB disconnect, device number 108 [ 487.857966][ T0] NOHZ: local_softirq_pending 08 23:04:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="434f19bb8d064a42629635677fd953a947efab3e2152e7540cfc08028d6e03e3f28a04ebe7b0f90352aaaa18310c5f681d78c8e5e25f22a277788c64e8d76592bf2e97e336a8a3573ec57bf0b20b15649d6b3bb4e3c2a9500b3fe8e31f5dfa8ac4097b7c404a50be47385f68662ac5447f00d141875926c370388655c3d0899246d7ace517c5035f63abbef5bec9ff94c3", 0x91}, {&(0x7f00000000c0)="c3a47a282093dfc1ee9fd11f016a340778a959ef008bce58401445562cc61cdc7ae1df895e56f40588b8aadba86294204bd428b0733c5e56ba6ff5c217d02f23a0d652b8ac054693bbe64df737d6ff30809eed04060852321d151486ac39379717b81ea1896d9acf81db582d5e9b2cc2b456630ac4ce01381c404412fead4255f1e61d50c756df2d5fe4e0f6f3331a1280e458875b9374cd8aad4172c3f895b304a5abf52051b8fd28d2b57954efd066441efb6a40b49d280d856c6806899b010385d3b476a0d58c20dc06c04fcf3ec304e6b05a78f4aec5b430060af2a8", 0xde}, {&(0x7f00000001c0)="1e16345840f6a861e8c0841c01272f408f9f2bfcf246f7fd820b947b9c1cdb086675f17d671e4c939db906caaabfb12150986dc97839c26f6b1f10dfdfbb7c8f01b8f1a2367267aeeabf77764d35100aa925df3d7a070c00ce8d14242eb15fd59588d397", 0x64}, {&(0x7f0000000240)="dcd6de4cd730b4fadc7c54421dc009f35fbd052a114cfa447923f04f33a58886f437e1fa1fe16180c4ab535942fc5d8373c654e6f8ca750a0aede334e7e42d49cf9d6d90cc0cb89216951ff42202c06ff92e6eb421bb79c263e892e02ac7b6fe841f4f0d6621c37fcacf7c46562040a789ea986aa5f27da9775d3161d1b6eae477b617b0b8204528074dc7364bab08546573864daffa0d6016ec3abc5681f63c34b714f894f694b16e5e2269de025927b5c051defde4e60a8f633216a488562ecf6214cac3127f5383acbdb3b6f8", 0xce}, {&(0x7f0000000340)="a9025671065ea273cba1a3acb15c591f6af6e31a5b5cfbc7e0bfff2a019fd892742f3f78488ebc6a316c9517c4cfcbdd8a61d4ebd013c825d8f5ec7e562f0e98db6ba225590f789e56a474d5fc81f89230dd0794465373ed", 0x58}], 0x5, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x62, "a335b1b03701e53b1ea2fc498deac0de329d5671463be8b9c45f8461fc305968684ecbf968957c564625a58b21ecfa6150ed99e97df9d31398a6fc479eb8db38e87006b4f0efc282e117f606d1b431ffda67f62fd2ef0625bcc8155dfa75360e249e"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8e}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x70, 0x117, 0x2, 0x57, "1a5443ba960082fa6a39a5cdce4b2a288bce72ca42b163b43bcb1a535e1383d9576033548b8478ad5e695126b0ca6389232519975b77108a2674e88ce419c119de14174020aa00c153f94b40a078cf4c095d69875dbccd"}, @op={0x18}], 0x1a8}, 0x46001) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xaa1414ac, @local}, "1501000000200100"}}}}}, 0x0) 23:04:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:19 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 23:04:19 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:19 executing program 4 (fault-call:4 fault-nth:12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 487.951902][ T3562] usb 2-1: USB disconnect, device number 80 23:04:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xac1414aa, @local}, "1501000000200100"}}}}}, 0x0) 23:04:19 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xfeffffff, @local}, "1501000000200100"}}}}}, 0x0) 23:04:19 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xfffffffe, @local}, "1501000000200100"}}}}}, 0x0) [ 488.316308][ T2687] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 488.506000][ T3562] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 488.566074][ T2687] usb 5-1: Using ep0 maxpacket: 8 [ 488.686145][ T2687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.705943][ T2687] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.714932][ T2687] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 488.745947][ T2687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.764554][ T2687] usb 5-1: config 0 descriptor?? [ 488.769785][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 488.916087][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 488.924219][ T3562] usb 2-1: config 0 has no interface number 0 [ 488.948543][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 488.994942][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 489.014895][T19444] FAULT_INJECTION: forcing a failure. [ 489.014895][T19444] name failslab, interval 1, probability 0, space 0, times 0 [ 489.023033][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 489.035724][T19444] CPU: 1 PID: 19444 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 489.045745][T19444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.055901][T19444] Call Trace: [ 489.059237][T19444] dump_stack+0x188/0x20d [ 489.061628][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 489.063577][T19444] should_fail.cold+0x5/0xa [ 489.063595][T19444] ? fault_create_debugfs_attr+0x140/0x140 [ 489.063619][T19444] should_failslab+0x5/0xf [ 489.079912][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.082918][T19444] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 489.082938][T19444] ? lockdep_init_map_waits+0x26a/0x890 [ 489.082960][T19444] snd_seq_timer_new+0x38/0x90 [ 489.097322][ T3562] usb 2-1: config 0 descriptor?? [ 489.101299][T19444] snd_seq_queue_alloc+0x17e/0x4d0 [ 489.101324][T19444] snd_seq_ioctl_create_queue+0xab/0x320 [ 489.101342][T19444] ? async_call_lookup_ports+0x10/0x10 [ 489.133344][T19444] snd_seq_kernel_client_ctl+0xeb/0x130 [ 489.138901][T19444] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 489.144184][T19444] ? delete_port+0xc0/0xc0 [ 489.148630][T19444] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 489.154199][T19444] ? find_held_lock+0x2d/0x110 [ 489.158985][T19444] snd_seq_oss_open+0x2fe/0x980 [ 489.163854][T19444] odev_open+0x6c/0x90 [ 489.167932][T19444] ? odev_release+0x70/0x70 [ 489.172454][T19444] soundcore_open+0x446/0x600 [ 489.177148][T19444] ? sound_devnode+0xf0/0xf0 [ 489.182442][T19444] chrdev_open+0x219/0x5c0 [ 489.186872][T19444] ? cdev_put.part.0+0x50/0x50 [ 489.191658][T19444] ? security_file_open+0x84/0x410 [ 489.196991][T19444] do_dentry_open+0x546/0x1340 [ 489.201785][T19444] ? cdev_put.part.0+0x50/0x50 [ 489.206568][T19444] ? security_inode_permission+0xc4/0xf0 [ 489.212225][T19444] ? chown_common+0x550/0x550 [ 489.216918][T19444] ? inode_permission+0xab/0x500 [ 489.221876][T19444] path_openat+0x1e59/0x27d0 [ 489.226490][T19444] ? path_lookupat.isra.0+0x530/0x530 [ 489.232065][T19444] ? lock_acquire+0x1f2/0x8f0 [ 489.236916][T19444] do_filp_open+0x192/0x260 [ 489.241434][T19444] ? may_open_dev+0xf0/0xf0 [ 489.245950][T19444] ? do_raw_spin_lock+0x129/0x2e0 [ 489.251407][T19444] ? _raw_spin_unlock+0x24/0x40 [ 489.256255][T19444] ? __alloc_fd+0x46d/0x600 [ 489.260940][T19444] do_sys_openat2+0x585/0x7d0 [ 489.265641][T19444] ? file_open_root+0x400/0x400 [ 489.270503][T19444] ? __mutex_unlock_slowpath+0xe2/0x660 [ 489.276143][T19444] ? wait_for_completion+0x270/0x270 [ 489.281593][T19444] ? __this_cpu_preempt_check+0x28/0x190 [ 489.287412][T19444] ? __sb_end_write+0x101/0x1d0 [ 489.292251][T19444] do_sys_open+0xc3/0x140 [ 489.296565][T19444] ? filp_open+0x70/0x70 [ 489.300907][T19444] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 489.306895][T19444] ? do_syscall_64+0x21/0x7d0 [ 489.311585][T19444] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 489.317621][T19444] do_syscall_64+0xf6/0x7d0 [ 489.322166][T19444] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 489.328057][T19444] RIP: 0033:0x45ca59 [ 489.331954][T19444] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 489.351816][T19444] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.360234][T19444] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 489.368193][T19444] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 489.376153][T19444] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 489.384114][T19444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 489.392087][T19444] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 489.410431][T19454] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 489.424863][ T2506] usb 5-1: USB disconnect, device number 109 [ 489.433047][T19454] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 489.650388][ T8725] usb 2-1: USB disconnect, device number 81 [ 490.426007][ T2506] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 490.685961][ T2506] usb 2-1: Using ep0 maxpacket: 8 [ 490.805979][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 490.814075][ T2506] usb 2-1: config 0 has no interface number 0 [ 490.820732][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 490.832289][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 490.842678][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 490.852686][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 490.862575][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.877992][ T2506] usb 2-1: config 0 descriptor?? [ 490.897199][T19528] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 490.904138][T19528] raw-gadget gadget: fail, usb_ep_enable returned -22 23:04:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000000)={0x8, 0x3a1e, 0x4, 0x4, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:22 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xffffffff, @local}, "1501000000200100"}}}}}, 0x0) 23:04:22 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 23:04:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:22 executing program 4 (fault-call:4 fault-nth:13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 491.091764][ T2506] usb 2-1: USB disconnect, device number 82 23:04:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local={0xac, 0x38}}, "1501000000200100"}}}}}, 0x0) 23:04:22 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local={0xac, 0x14, 0x38}}, "1501000000200100"}}}}}, 0x0) 23:04:22 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1502000000200100"}}}}}, 0x0) [ 491.446032][ T3562] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 491.645963][ T2506] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 491.696731][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 491.816554][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.837783][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 491.858041][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 491.874321][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.886744][ T2506] usb 2-1: Using ep0 maxpacket: 8 [ 491.928304][ T3562] usb 5-1: config 0 descriptor?? [ 492.006053][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 492.023256][ T2506] usb 2-1: config 0 has no interface number 0 [ 492.052330][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 492.064859][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 492.082487][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 492.093911][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 492.111950][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.139063][ T2506] usb 2-1: config 0 descriptor?? [ 492.156531][T19579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.163520][T19579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.201541][T19558] FAULT_INJECTION: forcing a failure. [ 492.201541][T19558] name failslab, interval 1, probability 0, space 0, times 0 [ 492.214753][T19558] CPU: 0 PID: 19558 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 492.223063][T19558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.233474][T19558] Call Trace: [ 492.237180][T19558] dump_stack+0x188/0x20d [ 492.241507][T19558] should_fail.cold+0x5/0xa [ 492.246028][T19558] ? fault_create_debugfs_attr+0x140/0x140 [ 492.251846][T19558] should_failslab+0x5/0xf [ 492.256246][T19558] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 492.261603][T19558] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 492.267132][T19558] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 492.273095][T19558] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 492.278554][T19558] snd_hrtimer_open+0x41/0x110 [ 492.283306][T19558] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 492.288662][T19558] snd_timer_open+0xb20/0x1030 [ 492.293439][T19558] ? snd_timer_close_locked+0xba0/0xba0 [ 492.298999][T19558] ? memcpy+0x39/0x60 [ 492.303376][T19558] ? kstrdup+0x56/0x70 [ 492.307434][T19558] snd_seq_timer_open+0x259/0x530 [ 492.312469][T19558] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 492.317918][T19558] ? mark_held_locks+0x9f/0xe0 [ 492.323115][T19558] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 492.329037][T19558] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 492.335122][T19558] queue_use+0xe6/0x250 [ 492.339354][T19558] snd_seq_queue_alloc+0x2c6/0x4d0 [ 492.344580][T19558] snd_seq_ioctl_create_queue+0xab/0x320 [ 492.350213][T19558] ? async_call_lookup_ports+0x10/0x10 [ 492.355689][T19558] snd_seq_kernel_client_ctl+0xeb/0x130 [ 492.361224][T19558] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 492.366611][T19558] ? delete_port+0xc0/0xc0 [ 492.371026][T19558] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 492.376571][T19558] ? find_held_lock+0x2d/0x110 [ 492.381344][T19558] snd_seq_oss_open+0x2fe/0x980 [ 492.386218][T19558] odev_open+0x6c/0x90 [ 492.390399][T19558] ? odev_release+0x70/0x70 [ 492.395026][T19558] soundcore_open+0x446/0x600 [ 492.399816][T19558] ? sound_devnode+0xf0/0xf0 [ 492.404405][T19558] chrdev_open+0x219/0x5c0 [ 492.408817][T19558] ? cdev_put.part.0+0x50/0x50 [ 492.413669][T19558] ? security_file_open+0x84/0x410 [ 492.418791][T19558] do_dentry_open+0x546/0x1340 [ 492.423575][T19558] ? cdev_put.part.0+0x50/0x50 [ 492.428356][T19558] ? security_inode_permission+0xc4/0xf0 [ 492.433988][T19558] ? chown_common+0x550/0x550 [ 492.438715][T19558] ? inode_permission+0xab/0x500 [ 492.443687][T19558] path_openat+0x1e59/0x27d0 [ 492.448294][T19558] ? path_lookupat.isra.0+0x530/0x530 [ 492.453694][T19558] do_filp_open+0x192/0x260 [ 492.458298][T19558] ? may_open_dev+0xf0/0xf0 [ 492.462909][T19558] ? do_raw_spin_lock+0x129/0x2e0 [ 492.467941][T19558] ? _raw_spin_unlock+0x24/0x40 [ 492.472795][T19558] ? __alloc_fd+0x46d/0x600 [ 492.477293][T19558] do_sys_openat2+0x585/0x7d0 [ 492.481964][T19558] ? file_open_root+0x400/0x400 [ 492.486801][T19558] ? __mutex_unlock_slowpath+0xe2/0x660 [ 492.492336][T19558] ? wait_for_completion+0x270/0x270 [ 492.497637][T19558] ? __this_cpu_preempt_check+0x28/0x190 [ 492.503254][T19558] ? __sb_end_write+0x101/0x1d0 [ 492.508107][T19558] do_sys_open+0xc3/0x140 [ 492.512429][T19558] ? filp_open+0x70/0x70 [ 492.516672][T19558] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 492.522639][T19558] ? do_syscall_64+0x21/0x7d0 [ 492.527321][T19558] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 492.533296][T19558] do_syscall_64+0xf6/0x7d0 [ 492.537789][T19558] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 492.543663][T19558] RIP: 0033:0x45ca59 [ 492.547541][T19558] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 492.567132][T19558] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.575533][T19558] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 492.583601][T19558] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 492.591569][T19558] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 492.599609][T19558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 492.607559][T19558] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 492.640701][ T8725] usb 5-1: USB disconnect, device number 110 23:04:25 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1503000000200100"}}}}}, 0x0) 23:04:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:25 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 23:04:25 executing program 4 (fault-call:4 fault-nth:14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="18000a00", @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="ee31a837a262e66652319df472e64ae1a14058d920dc536fcea0d0224c4d7c77f822b1dabb6e1dcf7434fd4d5931925147005ee0ff1faa24c3f9d24ead93ef0ac5407d67ec0001b142bcf2f888d24428686fd3de793dd63632368c2e935c54622ea293bc353298c2030ee0dbea813cc90d1765d12e809d3581a62c18c21b57a63d8a20f3a9b043e180f43d30ab0dc690442c5a72f4d6c311b1ee6f73d682f6d784c9b0d1d5ea4f8cbe09f549024dca41a0303bff561af277f9d334ec6f834a5c8fff25cbd6fd8d0eae27fe7f8999ee9ba08f0c17bf3653680d5131579bde5fb849ebdc15", 0xe4}, {&(0x7f0000000140)="ffea135ab9662d082d3d7a06461a7d41bc07e6ec788260d983528d2acd6f6fa2234ef0328f7b248e05981e98d8fa77bc9f7e7e3eea411f3685fe263c0167d7bfcf30b4bda741641ef44f8120cb83ff32a45d6da282c3917f46ea66b0febe277a83f57f", 0x63}, {&(0x7f00000001c0)="fa88c3901529598a60df4151f05980a1d66fee2f310b2ccb0aace90a1a09fcd4729b18b896d586654a88dc324ef0ce0f9b661ceb7c652b875875499f9bc5e87bfcd9c8899ae149c08ca6aa0c32243ed774f631370fff5b067b83c1b07c7b67b26d93ee122bba7a1a7fb948b4526b55", 0x6f}, {&(0x7f0000000240)="b20edbc381ae1d643a21a8a714df2cad6706284c66400b557c1ca6644ad63c453a196e22c302d453b82fc7bb5f7d0fc50eeeba040e4856bf1fa1e438d2e66ff112c49542501cd7765314784ec7", 0x4d}], 0x4, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x8, [@private=0xa010102, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0xb0}, 0x4000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 494.193616][ T3562] usb 2-1: USB disconnect, device number 83 23:04:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1504000000200100"}}}}}, 0x0) 23:04:25 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1505000000200100"}}}}}, 0x0) 23:04:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 494.421258][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:25 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1506000000200100"}}}}}, 0x0) [ 494.565765][ T2574] usb 5-1: new high-speed USB device number 111 using dummy_hcd 23:04:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1508000000200100"}}}}}, 0x0) 23:04:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:25 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 494.775800][ T3562] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 494.826417][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 494.946553][ T2574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.974240][ T2574] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.994463][ T2574] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 495.005294][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.036223][ T2574] usb 5-1: config 0 descriptor?? [ 495.061123][ T3562] usb 2-1: Using ep0 maxpacket: 8 23:04:26 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)={0x40002002}) [ 495.205900][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 495.213956][ T3562] usb 2-1: config 0 has no interface number 0 [ 495.222164][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 495.235090][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 495.246094][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 495.256589][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 495.266202][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.279298][ T3562] usb 2-1: config 0 descriptor?? [ 495.296152][T19662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 495.304997][T19662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 495.317025][T19651] FAULT_INJECTION: forcing a failure. [ 495.317025][T19651] name failslab, interval 1, probability 0, space 0, times 0 [ 495.331394][T19651] CPU: 0 PID: 19651 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 495.339734][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.349958][T19651] Call Trace: [ 495.353264][T19651] dump_stack+0x188/0x20d [ 495.357592][T19651] should_fail.cold+0x5/0xa [ 495.362088][T19651] ? fault_create_debugfs_attr+0x140/0x140 [ 495.367917][T19651] should_failslab+0x5/0xf [ 495.372352][T19651] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 495.377719][T19651] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 495.383269][T19651] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 495.389602][T19651] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 495.394969][T19651] snd_hrtimer_open+0x41/0x110 [ 495.399738][T19651] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 495.405108][T19651] snd_timer_open+0xb20/0x1030 [ 495.409877][T19651] ? snd_timer_close_locked+0xba0/0xba0 [ 495.415420][T19651] ? memcpy+0x39/0x60 [ 495.419390][T19651] ? kstrdup+0x56/0x70 [ 495.423515][T19651] snd_seq_timer_open+0x259/0x530 [ 495.428552][T19651] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 495.433926][T19651] ? mark_held_locks+0x9f/0xe0 [ 495.438683][T19651] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 495.444491][T19651] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 495.450486][T19651] queue_use+0xe6/0x250 [ 495.454641][T19651] snd_seq_queue_alloc+0x2c6/0x4d0 [ 495.459758][T19651] snd_seq_ioctl_create_queue+0xab/0x320 [ 495.465560][T19651] ? async_call_lookup_ports+0x10/0x10 [ 495.471024][T19651] snd_seq_kernel_client_ctl+0xeb/0x130 [ 495.476577][T19651] alloc_seq_queue.isra.0+0xf9/0x1a0 [ 495.481857][T19651] ? delete_port+0xc0/0xc0 [ 495.486286][T19651] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 495.491947][T19651] ? find_held_lock+0x2d/0x110 [ 495.496724][T19651] snd_seq_oss_open+0x2fe/0x980 [ 495.501575][T19651] odev_open+0x6c/0x90 [ 495.505654][T19651] ? odev_release+0x70/0x70 [ 495.510160][T19651] soundcore_open+0x446/0x600 [ 495.514860][T19651] ? sound_devnode+0xf0/0xf0 [ 495.519458][T19651] chrdev_open+0x219/0x5c0 [ 495.523858][T19651] ? cdev_put.part.0+0x50/0x50 [ 495.528621][T19651] ? security_file_open+0x84/0x410 [ 495.533732][T19651] do_dentry_open+0x546/0x1340 [ 495.538503][T19651] ? cdev_put.part.0+0x50/0x50 [ 495.543255][T19651] ? security_inode_permission+0xc4/0xf0 [ 495.548916][T19651] ? chown_common+0x550/0x550 [ 495.553602][T19651] ? inode_permission+0xab/0x500 [ 495.558539][T19651] path_openat+0x1e59/0x27d0 [ 495.563137][T19651] ? path_lookupat.isra.0+0x530/0x530 [ 495.568523][T19651] do_filp_open+0x192/0x260 [ 495.573020][T19651] ? may_open_dev+0xf0/0xf0 [ 495.577510][T19651] ? do_raw_spin_lock+0x129/0x2e0 [ 495.582700][T19651] ? _raw_spin_unlock+0x24/0x40 [ 495.587543][T19651] ? __alloc_fd+0x46d/0x600 [ 495.592523][T19651] do_sys_openat2+0x585/0x7d0 [ 495.597289][T19651] ? file_open_root+0x400/0x400 [ 495.602132][T19651] ? __mutex_unlock_slowpath+0xe2/0x660 [ 495.607676][T19651] ? wait_for_completion+0x270/0x270 [ 495.613049][T19651] ? __this_cpu_preempt_check+0x28/0x190 [ 495.618682][T19651] ? __sb_end_write+0x101/0x1d0 [ 495.623596][T19651] do_sys_open+0xc3/0x140 [ 495.627925][T19651] ? filp_open+0x70/0x70 [ 495.632532][T19651] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 495.638639][T19651] ? do_syscall_64+0x21/0x7d0 [ 495.643318][T19651] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 495.649390][T19651] do_syscall_64+0xf6/0x7d0 [ 495.653895][T19651] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 495.659770][T19651] RIP: 0033:0x45ca59 [ 495.665123][T19651] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 495.684726][T19651] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.693145][T19651] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 495.701204][T19651] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 495.709174][T19651] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 495.717174][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 495.725453][T19651] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 495.749769][ T3583] usb 5-1: USB disconnect, device number 111 23:04:27 executing program 4 (fault-call:4 fault-nth:15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 496.555691][ T17] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 496.815861][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 496.955667][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.966157][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.975357][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 496.987650][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.997335][ T17] usb 5-1: config 0 descriptor?? [ 497.249857][T19725] FAULT_INJECTION: forcing a failure. [ 497.249857][T19725] name failslab, interval 1, probability 0, space 0, times 0 [ 497.263098][T19725] CPU: 0 PID: 19725 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 497.271437][T19725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.281649][T19725] Call Trace: [ 497.285295][T19725] dump_stack+0x188/0x20d [ 497.289647][T19725] should_fail.cold+0x5/0xa [ 497.294519][T19725] ? fault_create_debugfs_attr+0x140/0x140 [ 497.296277][ T17] usb 2-1: USB disconnect, device number 84 [ 497.302302][T19725] should_failslab+0x5/0xf [ 497.302317][T19725] __kmalloc+0x2d9/0x7a0 [ 497.302332][T19725] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 497.302347][T19725] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 497.302368][T19725] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 497.333375][T19725] snd_seq_oss_readq_new+0x94/0x2d0 [ 497.338682][T19725] snd_seq_oss_open+0x4ce/0x980 [ 497.343553][T19725] odev_open+0x6c/0x90 [ 497.347661][T19725] ? odev_release+0x70/0x70 [ 497.352184][T19725] soundcore_open+0x446/0x600 [ 497.356880][T19725] ? sound_devnode+0xf0/0xf0 [ 497.361487][T19725] chrdev_open+0x219/0x5c0 [ 497.365916][T19725] ? cdev_put.part.0+0x50/0x50 [ 497.370693][T19725] ? security_file_open+0x84/0x410 [ 497.375822][T19725] do_dentry_open+0x546/0x1340 [ 497.380598][T19725] ? cdev_put.part.0+0x50/0x50 [ 497.385462][T19725] ? security_inode_permission+0xc4/0xf0 [ 497.391102][T19725] ? chown_common+0x550/0x550 [ 497.395876][T19725] ? inode_permission+0xab/0x500 [ 497.400829][T19725] path_openat+0x1e59/0x27d0 [ 497.405438][T19725] ? path_lookupat.isra.0+0x530/0x530 [ 497.410862][T19725] do_filp_open+0x192/0x260 [ 497.415383][T19725] ? may_open_dev+0xf0/0xf0 [ 497.419989][T19725] ? do_raw_spin_lock+0x129/0x2e0 [ 497.425032][T19725] ? _raw_spin_unlock+0x24/0x40 [ 497.429927][T19725] ? __alloc_fd+0x46d/0x600 [ 497.434448][T19725] do_sys_openat2+0x585/0x7d0 [ 497.439248][T19725] ? file_open_root+0x400/0x400 [ 497.444750][T19725] ? __mutex_unlock_slowpath+0xe2/0x660 [ 497.450305][T19725] ? wait_for_completion+0x270/0x270 [ 497.455598][T19725] ? __this_cpu_preempt_check+0x28/0x190 [ 497.461243][T19725] ? __sb_end_write+0x101/0x1d0 [ 497.466108][T19725] do_sys_open+0xc3/0x140 [ 497.470445][T19725] ? filp_open+0x70/0x70 [ 497.474702][T19725] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 497.480692][T19725] ? do_syscall_64+0x21/0x7d0 [ 497.485381][T19725] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 497.491383][T19725] do_syscall_64+0xf6/0x7d0 [ 497.495940][T19725] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 497.501836][T19725] RIP: 0033:0x45ca59 [ 497.505734][T19725] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 497.525342][T19725] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.533763][T19725] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 497.541768][T19725] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c 23:04:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1511000000200100"}}}}}, 0x0) 23:04:28 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) 23:04:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553ff4", 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r3 = accept$alg(r2, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xfe6d) recvmmsg(r3, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000000100)=""/4104, 0x1008}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 497.549755][T19725] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 497.557725][T19725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 497.566223][T19725] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 497.671014][ T8725] usb 5-1: USB disconnect, device number 112 23:04:28 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1529000000200100"}}}}}, 0x0) 23:04:29 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:29 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "152b000000200100"}}}}}, 0x0) 23:04:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "152c000000200100"}}}}}, 0x0) [ 498.065650][ T17] usb 2-1: new high-speed USB device number 85 using dummy_hcd 23:04:29 executing program 4 (fault-call:4 fault-nth:16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:29 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:29 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "152f000000200100"}}}}}, 0x0) [ 498.325798][ T17] usb 2-1: Using ep0 maxpacket: 8 23:04:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) [ 498.465745][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 498.477974][ T17] usb 2-1: config 0 has no interface number 0 [ 498.491369][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 498.513713][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 498.529154][ T8725] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 498.537413][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 498.547801][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 498.559245][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.568851][ T17] usb 2-1: config 0 descriptor?? [ 498.586107][T19759] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 498.594133][T19759] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 498.785556][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 498.906726][ T8725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.917442][ T8725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.929696][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 498.940211][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.953781][ T8725] usb 5-1: config 0 descriptor?? [ 499.210433][T19792] FAULT_INJECTION: forcing a failure. [ 499.210433][T19792] name failslab, interval 1, probability 0, space 0, times 0 [ 499.223926][T19792] CPU: 1 PID: 19792 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 499.232267][T19792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.242500][T19792] Call Trace: [ 499.245799][T19792] dump_stack+0x188/0x20d [ 499.250185][T19792] should_fail.cold+0x5/0xa [ 499.254708][T19792] ? fault_create_debugfs_attr+0x140/0x140 [ 499.260594][T19792] ? mark_lock+0x11f/0xdd0 [ 499.265037][T19792] should_failslab+0x5/0xf [ 499.269471][T19792] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 499.274863][T19792] ? debug_smp_processor_id+0x2f/0x185 [ 499.281373][T19792] snd_seq_oss_writeq_new+0x9d/0x310 [ 499.286650][T19792] ? snd_seq_oss_readq_info_read+0x100/0x100 [ 499.292626][T19792] ? lockdep_init_map_waits+0x26a/0x890 [ 499.298247][T19792] ? lockdep_init_map_waits+0x26a/0x890 [ 499.303784][T19792] ? __raw_spin_lock_init+0x34/0x100 [ 499.309074][T19792] snd_seq_oss_open+0x705/0x980 [ 499.313917][T19792] odev_open+0x6c/0x90 [ 499.317975][T19792] ? odev_release+0x70/0x70 [ 499.322471][T19792] soundcore_open+0x446/0x600 [ 499.327928][T19792] ? sound_devnode+0xf0/0xf0 [ 499.332510][T19792] chrdev_open+0x219/0x5c0 [ 499.336922][T19792] ? cdev_put.part.0+0x50/0x50 [ 499.341702][T19792] ? security_file_open+0x84/0x410 [ 499.346820][T19792] do_dentry_open+0x546/0x1340 [ 499.351592][T19792] ? cdev_put.part.0+0x50/0x50 [ 499.356621][T19792] ? security_inode_permission+0xc4/0xf0 [ 499.362387][T19792] ? chown_common+0x550/0x550 [ 499.367263][T19792] ? inode_permission+0xab/0x500 [ 499.373677][T19792] path_openat+0x1e59/0x27d0 [ 499.378625][T19792] ? path_lookupat.isra.0+0x530/0x530 [ 499.384003][T19792] do_filp_open+0x192/0x260 [ 499.388796][T19792] ? may_open_dev+0xf0/0xf0 [ 499.393382][T19792] ? do_raw_spin_lock+0x129/0x2e0 [ 499.398417][T19792] ? _raw_spin_unlock+0x24/0x40 [ 499.403265][T19792] ? __alloc_fd+0x46d/0x600 [ 499.407774][T19792] do_sys_openat2+0x585/0x7d0 [ 499.412720][T19792] ? file_open_root+0x400/0x400 [ 499.417560][T19792] ? __mutex_unlock_slowpath+0xe2/0x660 [ 499.423107][T19792] ? wait_for_completion+0x270/0x270 [ 499.428919][T19792] ? __this_cpu_preempt_check+0x28/0x190 [ 499.436117][T19792] ? __sb_end_write+0x101/0x1d0 [ 499.440958][T19792] do_sys_open+0xc3/0x140 [ 499.445448][T19792] ? filp_open+0x70/0x70 [ 499.449681][T19792] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 499.455651][T19792] ? do_syscall_64+0x21/0x7d0 [ 499.460314][T19792] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 499.466373][T19792] do_syscall_64+0xf6/0x7d0 [ 499.470868][T19792] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 499.476750][T19792] RIP: 0033:0x45ca59 [ 499.480629][T19792] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.500219][T19792] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 499.508617][T19792] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 499.516586][T19792] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 499.524541][T19792] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 499.532495][T19792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 499.540467][T19792] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 499.598100][ T2506] usb 5-1: USB disconnect, device number 113 23:04:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "153a000000200100"}}}}}, 0x0) 23:04:31 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:31 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) 23:04:31 executing program 4 (fault-call:4 fault-nth:17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="5d89b064e2c7660f5bfb89822e79831a", 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0) [ 500.564430][ T8725] usb 2-1: USB disconnect, device number 85 23:04:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "153c000000200100"}}}}}, 0x0) 23:04:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15b7010000200100"}}}}}, 0x0) 23:04:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:32 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1500f00000200100"}}}}}, 0x0) 23:04:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1589ffffff200100"}}}}}, 0x0) [ 500.955389][ T17] usb 5-1: new high-speed USB device number 114 using dummy_hcd 23:04:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:32 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:32 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501020000200100"}}}}}, 0x0) [ 501.145789][ T8725] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 501.195672][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 501.330063][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.355258][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.364285][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 501.399021][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.413279][ T17] usb 5-1: config 0 descriptor?? 23:04:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x2, r6, 0x9}) [ 501.463389][ T8725] usb 2-1: device descriptor read/64, error 18 [ 501.680745][T19858] FAULT_INJECTION: forcing a failure. [ 501.680745][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 501.695105][T19858] CPU: 1 PID: 19858 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 501.703482][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.713617][T19858] Call Trace: [ 501.716931][T19858] dump_stack+0x188/0x20d [ 501.721282][T19858] should_fail.cold+0x5/0xa [ 501.725823][T19858] ? fault_create_debugfs_attr+0x140/0x140 [ 501.731874][T19858] should_failslab+0x5/0xf [ 501.736313][T19858] __kmalloc+0x2d9/0x7a0 [ 501.740568][T19858] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 501.746125][T19858] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 501.752206][T19858] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 501.757778][T19858] snd_seq_oss_readq_new+0x94/0x2d0 [ 501.762997][T19858] snd_seq_oss_open+0x4ce/0x980 [ 501.767959][T19858] odev_open+0x6c/0x90 [ 501.772045][T19858] ? odev_release+0x70/0x70 [ 501.776635][T19858] soundcore_open+0x446/0x600 [ 501.781768][T19858] ? sound_devnode+0xf0/0xf0 [ 501.786362][T19858] chrdev_open+0x219/0x5c0 [ 501.790799][T19858] ? cdev_put.part.0+0x50/0x50 [ 501.795568][T19858] ? security_file_open+0x84/0x410 [ 501.800694][T19858] do_dentry_open+0x546/0x1340 [ 501.806327][T19858] ? cdev_put.part.0+0x50/0x50 [ 501.811087][T19858] ? security_inode_permission+0xc4/0xf0 [ 501.816807][T19858] ? chown_common+0x550/0x550 [ 501.821478][T19858] ? inode_permission+0xab/0x500 [ 501.826430][T19858] path_openat+0x1e59/0x27d0 [ 501.831038][T19858] ? path_lookupat.isra.0+0x530/0x530 [ 501.836420][T19858] ? lock_acquire+0x1f2/0x8f0 [ 501.841115][T19858] do_filp_open+0x192/0x260 [ 501.845626][T19858] ? may_open_dev+0xf0/0xf0 [ 501.850144][T19858] ? do_raw_spin_lock+0x129/0x2e0 [ 501.855186][T19858] ? _raw_spin_unlock+0x24/0x40 [ 501.860039][T19858] ? __alloc_fd+0x46d/0x600 [ 501.864548][T19858] do_sys_openat2+0x585/0x7d0 [ 501.869246][T19858] ? file_open_root+0x400/0x400 [ 501.874209][T19858] ? __mutex_unlock_slowpath+0xe2/0x660 [ 501.879772][T19858] ? wait_for_completion+0x270/0x270 [ 501.885058][T19858] ? __this_cpu_preempt_check+0x28/0x190 [ 501.890862][T19858] ? __sb_end_write+0x101/0x1d0 [ 501.895738][T19858] do_sys_open+0xc3/0x140 [ 501.900084][T19858] ? filp_open+0x70/0x70 [ 501.904337][T19858] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 501.910319][T19858] ? do_syscall_64+0x21/0x7d0 [ 501.915095][T19858] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 501.921083][T19858] do_syscall_64+0xf6/0x7d0 [ 501.925602][T19858] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 501.936568][T19858] RIP: 0033:0x45ca59 [ 501.941421][T19858] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 501.961292][T19858] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.970221][T19858] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 501.978291][T19858] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 501.986370][T19858] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 501.994349][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 502.002721][T19858] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 502.030357][ T2506] usb 5-1: USB disconnect, device number 114 [ 502.175293][ T8725] usb 2-1: device descriptor read/64, error 18 [ 502.445334][ T8725] usb 2-1: new high-speed USB device number 87 using dummy_hcd 23:04:33 executing program 4 (fault-call:4 fault-nth:18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 502.715277][ T8725] usb 2-1: device descriptor read/64, error 18 [ 502.835218][ T2506] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 503.075207][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 503.135461][ T8725] usb 2-1: device descriptor read/64, error 18 [ 503.195293][ T2506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.205500][ T2506] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.214775][ T2506] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 503.226086][ T2506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.235055][ T2506] usb 5-1: config 0 descriptor?? [ 503.255532][ T8725] usb usb2-port1: attempt power cycle [ 503.488889][T19909] FAULT_INJECTION: forcing a failure. [ 503.488889][T19909] name failslab, interval 1, probability 0, space 0, times 0 [ 503.501639][T19909] CPU: 1 PID: 19909 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 503.510287][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.520339][T19909] Call Trace: [ 503.523695][T19909] dump_stack+0x188/0x20d [ 503.528027][T19909] should_fail.cold+0x5/0xa [ 503.532531][T19909] ? fault_create_debugfs_attr+0x140/0x140 [ 503.538354][T19909] should_failslab+0x5/0xf [ 503.542981][T19909] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 503.548404][T19909] ? mark_held_locks+0x9f/0xe0 [ 503.553342][T19909] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 503.559146][T19909] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 503.565526][T19909] snd_seq_port_connect+0x5d/0x510 [ 503.570640][T19909] ? _raw_read_unlock+0x24/0x40 [ 503.575486][T19909] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 503.580863][T19909] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 503.586763][T19909] snd_seq_kernel_client_ctl+0xeb/0x130 [ 503.592310][T19909] snd_seq_oss_midi_open+0x50a/0x670 [ 503.597595][T19909] ? snd_seq_oss_midi_setup+0x50/0x50 [ 503.603028][T19909] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 503.609882][T19909] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 503.615770][T19909] ? __raw_spin_lock_init+0x34/0x100 [ 503.621067][T19909] snd_seq_oss_open+0x7fa/0x980 [ 503.626438][T19909] odev_open+0x6c/0x90 [ 503.630500][T19909] ? odev_release+0x70/0x70 [ 503.635009][T19909] soundcore_open+0x446/0x600 [ 503.639690][T19909] ? sound_devnode+0xf0/0xf0 [ 503.644302][T19909] chrdev_open+0x219/0x5c0 [ 503.648803][T19909] ? cdev_put.part.0+0x50/0x50 [ 503.653647][T19909] ? security_file_open+0x84/0x410 [ 503.658756][T19909] do_dentry_open+0x546/0x1340 [ 503.663532][T19909] ? cdev_put.part.0+0x50/0x50 [ 503.668302][T19909] ? security_inode_permission+0xc4/0xf0 [ 503.673938][T19909] ? chown_common+0x550/0x550 [ 503.678621][T19909] ? inode_permission+0xab/0x500 [ 503.683566][T19909] path_openat+0x1e59/0x27d0 [ 503.688171][T19909] ? path_lookupat.isra.0+0x530/0x530 [ 503.693566][T19909] do_filp_open+0x192/0x260 [ 503.698086][T19909] ? may_open_dev+0xf0/0xf0 [ 503.702607][T19909] ? do_raw_spin_lock+0x129/0x2e0 [ 503.707752][T19909] ? _raw_spin_unlock+0x24/0x40 [ 503.712613][T19909] ? __alloc_fd+0x46d/0x600 [ 503.717141][T19909] do_sys_openat2+0x585/0x7d0 [ 503.721826][T19909] ? file_open_root+0x400/0x400 [ 503.726686][T19909] ? __mutex_unlock_slowpath+0xe2/0x660 [ 503.732334][T19909] ? wait_for_completion+0x270/0x270 [ 503.738343][T19909] ? __this_cpu_preempt_check+0x28/0x190 [ 503.744610][T19909] ? __sb_end_write+0x101/0x1d0 [ 503.749809][T19909] do_sys_open+0xc3/0x140 [ 503.754162][T19909] ? filp_open+0x70/0x70 [ 503.758429][T19909] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 503.764420][T19909] ? do_syscall_64+0x21/0x7d0 [ 503.769198][T19909] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 503.775461][T19909] do_syscall_64+0xf6/0x7d0 [ 503.779972][T19909] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 503.785873][T19909] RIP: 0033:0x45ca59 [ 503.789774][T19909] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.809726][T19909] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.818143][T19909] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 503.826121][T19909] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c 23:04:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xd0080, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000080)=[0xf58], 0x1, 0x2, 0x1, 0xddd, 0x7f, 0x80, 0x0, {0x8, 0xc1e, 0x7, 0x8b4, 0x20, 0x7f, 0x7, 0x208b, 0x7, 0x3, 0x100, 0xa37, 0x5, 0xfffffffc, "efcf52fa087659db235987b0053b2133457fc4debe01e2959aa1a63b7341b948"}}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) dup3(r4, r3, 0x0) fremovexattr(r4, &(0x7f0000000000)=@random={'os2.', '\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09200009050112080700000009058c0a08"], 0x0) 23:04:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501030000200100"}}}}}, 0x0) 23:04:35 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) [ 503.836005][T19909] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 503.844415][T19909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 503.852539][T19909] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 503.925544][ T3583] usb 5-1: USB disconnect, device number 115 23:04:35 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501040000200100"}}}}}, 0x0) 23:04:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501060000200100"}}}}}, 0x0) 23:04:35 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501070000200100"}}}}}, 0x0) [ 504.355259][ T8725] usb 2-1: new high-speed USB device number 88 using dummy_hcd 23:04:35 executing program 4 (fault-call:4 fault-nth:19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 504.478981][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 504.625533][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 504.633575][ T8725] usb 2-1: config 0 has no interface number 0 [ 504.651125][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 504.672391][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 504.684537][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 504.695558][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 504.704657][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.727323][ T8725] usb 2-1: config 0 descriptor?? [ 504.746393][T19934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 504.753488][T19934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 504.855410][ T3583] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 505.095197][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 505.215344][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.225803][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.234908][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 505.246309][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.258620][ T3583] usb 5-1: config 0 descriptor?? [ 505.500324][T19955] FAULT_INJECTION: forcing a failure. [ 505.500324][T19955] name failslab, interval 1, probability 0, space 0, times 0 [ 505.514939][T19955] CPU: 1 PID: 19955 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 505.523454][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.533562][T19955] Call Trace: [ 505.536846][T19955] dump_stack+0x188/0x20d [ 505.541170][T19955] should_fail.cold+0x5/0xa [ 505.545675][T19955] ? fault_create_debugfs_attr+0x140/0x140 [ 505.551482][T19955] should_failslab+0x5/0xf [ 505.555911][T19955] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 505.561293][T19955] ? mark_held_locks+0x9f/0xe0 [ 505.566361][T19955] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 505.572194][T19955] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 505.578598][T19955] snd_seq_port_connect+0x5d/0x510 [ 505.583692][T19955] ? _raw_read_unlock+0x24/0x40 [ 505.588537][T19955] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 505.594051][T19955] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 505.599939][T19955] snd_seq_kernel_client_ctl+0xeb/0x130 [ 505.605490][T19955] snd_seq_oss_midi_open+0x3ee/0x670 [ 505.610783][T19955] ? snd_seq_oss_midi_setup+0x50/0x50 [ 505.616476][T19955] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 505.622305][T19955] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 505.628315][T19955] ? __raw_spin_lock_init+0x34/0x100 [ 505.633611][T19955] snd_seq_oss_open+0x7fa/0x980 [ 505.638457][T19955] odev_open+0x6c/0x90 [ 505.642522][T19955] ? odev_release+0x70/0x70 [ 505.647021][T19955] soundcore_open+0x446/0x600 [ 505.651710][T19955] ? sound_devnode+0xf0/0xf0 [ 505.656284][T19955] chrdev_open+0x219/0x5c0 [ 505.660705][T19955] ? cdev_put.part.0+0x50/0x50 [ 505.665467][T19955] ? security_file_open+0x84/0x410 [ 505.670662][T19955] do_dentry_open+0x546/0x1340 [ 505.675587][T19955] ? cdev_put.part.0+0x50/0x50 [ 505.680366][T19955] ? security_inode_permission+0xc4/0xf0 [ 505.685995][T19955] ? chown_common+0x550/0x550 [ 505.690675][T19955] ? inode_permission+0xab/0x500 [ 505.695624][T19955] path_openat+0x1e59/0x27d0 [ 505.700226][T19955] ? path_lookupat.isra.0+0x530/0x530 [ 505.705621][T19955] do_filp_open+0x192/0x260 [ 505.710125][T19955] ? may_open_dev+0xf0/0xf0 [ 505.714632][T19955] ? do_raw_spin_lock+0x129/0x2e0 [ 505.719649][T19955] ? _raw_spin_unlock+0x24/0x40 [ 505.724501][T19955] ? __alloc_fd+0x46d/0x600 [ 505.729025][T19955] do_sys_openat2+0x585/0x7d0 [ 505.733911][T19955] ? file_open_root+0x400/0x400 [ 505.738925][T19955] ? __mutex_unlock_slowpath+0xe2/0x660 [ 505.744500][T19955] ? wait_for_completion+0x270/0x270 [ 505.749979][T19955] ? __this_cpu_preempt_check+0x28/0x190 [ 505.755616][T19955] ? __sb_end_write+0x101/0x1d0 [ 505.760893][T19955] do_sys_open+0xc3/0x140 [ 505.765350][T19955] ? filp_open+0x70/0x70 [ 505.769604][T19955] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 505.775713][T19955] ? do_syscall_64+0x21/0x7d0 [ 505.780505][T19955] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 505.787681][T19955] do_syscall_64+0xf6/0x7d0 [ 505.792193][T19955] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 505.798084][T19955] RIP: 0033:0x45ca59 [ 505.801991][T19955] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.821588][T19955] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.830088][T19955] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 505.838151][T19955] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 505.846245][T19955] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 505.854227][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 505.862207][T19955] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 505.886299][ T3562] usb 5-1: USB disconnect, device number 116 23:04:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000100)={{}, {0x0, r7+30000000}}, 0x0) r8 = dup3(r5, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000000)={0x2001}) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501080000200100"}}}}}, 0x0) 23:04:38 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000018}) 23:04:38 executing program 4 (fault-call:4 fault-nth:20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 506.898460][ T3583] usb 2-1: USB disconnect, device number 88 23:04:38 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15010b0000200100"}}}}}, 0x0) 23:04:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15010f0000200100"}}}}}, 0x0) 23:04:38 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501240000200100"}}}}}, 0x0) 23:04:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 507.304928][ T3562] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 507.435146][ T8725] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 507.555041][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 507.694219][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.710308][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 507.720539][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 507.730883][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.744163][ T3562] usb 5-1: config 0 descriptor?? [ 507.744773][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 507.885738][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 507.893765][ T8725] usb 2-1: config 0 has no interface number 0 [ 507.901350][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 507.913343][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 507.924139][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 507.935218][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 507.944436][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.956592][ T8725] usb 2-1: config 0 descriptor?? [ 507.985190][T20022] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 507.992436][T20022] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 508.003553][T20016] FAULT_INJECTION: forcing a failure. [ 508.003553][T20016] name failslab, interval 1, probability 0, space 0, times 0 [ 508.019004][T20016] CPU: 1 PID: 20016 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 508.027372][T20016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.037432][T20016] Call Trace: [ 508.040733][T20016] dump_stack+0x188/0x20d [ 508.045081][T20016] should_fail.cold+0x5/0xa [ 508.049598][T20016] ? fault_create_debugfs_attr+0x140/0x140 [ 508.055423][T20016] should_failslab+0x5/0xf [ 508.059853][T20016] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 508.065244][T20016] ? mark_held_locks+0x9f/0xe0 [ 508.070011][T20016] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 508.075819][T20016] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 508.081800][T20016] snd_seq_port_connect+0x5d/0x510 [ 508.086917][T20016] ? _raw_read_unlock+0x24/0x40 [ 508.091777][T20016] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 508.097159][T20016] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 508.103044][T20016] snd_seq_kernel_client_ctl+0xeb/0x130 [ 508.108593][T20016] snd_seq_oss_midi_open+0x50a/0x670 [ 508.113893][T20016] ? snd_seq_oss_midi_setup+0x50/0x50 [ 508.119262][T20016] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 508.125073][T20016] ? get_mdev+0x75/0x90 [ 508.129329][T20016] ? get_mididev.isra.0+0x76/0xa0 [ 508.134381][T20016] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 508.141530][T20016] snd_seq_oss_open+0x7fa/0x980 [ 508.146397][T20016] odev_open+0x6c/0x90 [ 508.150483][T20016] ? odev_release+0x70/0x70 [ 508.155115][T20016] soundcore_open+0x446/0x600 [ 508.159936][T20016] ? sound_devnode+0xf0/0xf0 [ 508.164533][T20016] chrdev_open+0x219/0x5c0 [ 508.169074][T20016] ? cdev_put.part.0+0x50/0x50 [ 508.173840][T20016] ? security_file_open+0x84/0x410 [ 508.178960][T20016] do_dentry_open+0x546/0x1340 [ 508.183714][T20016] ? cdev_put.part.0+0x50/0x50 [ 508.188482][T20016] ? security_inode_permission+0xc4/0xf0 [ 508.194136][T20016] ? chown_common+0x550/0x550 [ 508.198816][T20016] ? inode_permission+0xab/0x500 [ 508.203760][T20016] path_openat+0x1e59/0x27d0 [ 508.208364][T20016] ? path_lookupat.isra.0+0x530/0x530 [ 508.213746][T20016] do_filp_open+0x192/0x260 [ 508.218258][T20016] ? may_open_dev+0xf0/0xf0 [ 508.223303][T20016] ? do_raw_spin_lock+0x129/0x2e0 [ 508.228361][T20016] ? _raw_spin_unlock+0x24/0x40 [ 508.233221][T20016] ? __alloc_fd+0x46d/0x600 [ 508.237744][T20016] do_sys_openat2+0x585/0x7d0 [ 508.242521][T20016] ? file_open_root+0x400/0x400 [ 508.247391][T20016] ? __mutex_unlock_slowpath+0xe2/0x660 [ 508.253128][T20016] ? wait_for_completion+0x270/0x270 [ 508.258418][T20016] ? __this_cpu_preempt_check+0x28/0x190 [ 508.264054][T20016] ? __sb_end_write+0x101/0x1d0 [ 508.268910][T20016] do_sys_open+0xc3/0x140 [ 508.273441][T20016] ? filp_open+0x70/0x70 [ 508.277690][T20016] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 508.283664][T20016] ? do_syscall_64+0x21/0x7d0 [ 508.288527][T20016] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 508.294532][T20016] do_syscall_64+0xf6/0x7d0 [ 508.299090][T20016] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 508.304995][T20016] RIP: 0033:0x45ca59 [ 508.308920][T20016] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.328531][T20016] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.336955][T20016] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 508.345055][T20016] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 508.353060][T20016] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 508.361578][T20016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 508.369548][T20016] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 508.405366][ T3562] usb 5-1: USB disconnect, device number 117 [ 508.435615][ T8725] usb 2-1: USB disconnect, device number 89 [ 508.994788][ T8725] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 509.244670][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 509.406783][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 509.414917][ T8725] usb 2-1: config 0 has no interface number 0 [ 509.422424][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 509.435218][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 509.446087][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 509.457401][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 509.467424][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.478143][ T8725] usb 2-1: config 0 descriptor?? [ 509.496020][T20081] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.503030][T20081] raw-gadget gadget: fail, usb_ep_enable returned -22 23:04:41 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080240c5670000000109022400010000000009040200023c09000009054112080700000009058c0a08"], 0x0) 23:04:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501380000200100"}}}}}, 0x0) 23:04:41 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) 23:04:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:41 executing program 4 (fault-call:4 fault-nth:21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 509.745973][ T3583] usb 2-1: USB disconnect, device number 90 23:04:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000300200100"}}}}}, 0x0) 23:04:41 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000600200100"}}}}}, 0x0) 23:04:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000700200100"}}}}}, 0x0) 23:04:41 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:41 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000b00200100"}}}}}, 0x0) [ 510.124596][ T3562] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 510.218495][ T3583] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 510.394557][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 510.475823][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 510.514740][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.525450][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.534634][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 510.544219][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.553836][ T3562] usb 5-1: config 0 descriptor?? [ 510.604868][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 510.613003][ T3583] usb 2-1: config 0 has no interface number 0 [ 510.619367][ T3583] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x41, skipping [ 510.630276][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 510.640916][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=4002, bcdDevice=67.c5 [ 510.650528][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.664752][ T3583] usb 2-1: config 0 descriptor?? [ 510.684834][T20127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.710241][T20127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.803507][T20129] FAULT_INJECTION: forcing a failure. [ 510.803507][T20129] name failslab, interval 1, probability 0, space 0, times 0 [ 510.821465][T20129] CPU: 0 PID: 20129 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 510.829855][T20129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.839899][T20129] Call Trace: [ 510.843183][T20129] dump_stack+0x188/0x20d [ 510.847518][T20129] should_fail.cold+0x5/0xa [ 510.852023][T20129] ? fault_create_debugfs_attr+0x140/0x140 [ 510.857979][T20129] should_failslab+0x5/0xf [ 510.862551][T20129] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 510.867917][T20129] ? mark_held_locks+0x9f/0xe0 [ 510.872685][T20129] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 510.878485][T20129] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 510.884527][T20129] snd_seq_port_connect+0x5d/0x510 [ 510.889983][T20129] ? _raw_read_unlock+0x24/0x40 [ 510.894833][T20129] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 510.900248][T20129] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 510.906161][T20129] snd_seq_kernel_client_ctl+0xeb/0x130 [ 510.911713][T20129] snd_seq_oss_midi_open+0x50a/0x670 [ 510.917015][T20129] ? snd_seq_oss_midi_setup+0x50/0x50 [ 510.922372][T20129] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 510.928172][T20129] ? get_mdev+0x75/0x90 [ 510.932398][T20129] ? get_mididev.isra.0+0x76/0xa0 [ 510.937421][T20129] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 510.943601][T20129] snd_seq_oss_open+0x7fa/0x980 [ 510.948438][T20129] odev_open+0x6c/0x90 [ 510.952487][T20129] ? odev_release+0x70/0x70 [ 510.956972][T20129] soundcore_open+0x446/0x600 [ 510.962511][T20129] ? sound_devnode+0xf0/0xf0 [ 510.967087][T20129] chrdev_open+0x219/0x5c0 [ 510.971680][T20129] ? cdev_put.part.0+0x50/0x50 [ 510.976445][T20129] ? security_file_open+0x84/0x410 [ 510.981559][T20129] do_dentry_open+0x546/0x1340 [ 510.986311][T20129] ? cdev_put.part.0+0x50/0x50 [ 510.991063][T20129] ? security_inode_permission+0xc4/0xf0 [ 510.996704][T20129] ? chown_common+0x550/0x550 [ 511.001377][T20129] ? inode_permission+0xab/0x500 [ 511.006301][T20129] path_openat+0x1e59/0x27d0 [ 511.010886][T20129] ? path_lookupat.isra.0+0x530/0x530 [ 511.016261][T20129] ? lock_acquire+0x1f2/0x8f0 [ 511.020945][T20129] do_filp_open+0x192/0x260 [ 511.025459][T20129] ? may_open_dev+0xf0/0xf0 [ 511.030144][T20129] ? do_raw_spin_lock+0x129/0x2e0 [ 511.035367][T20129] ? _raw_spin_unlock+0x24/0x40 [ 511.040300][T20129] ? __alloc_fd+0x46d/0x600 [ 511.044812][T20129] do_sys_openat2+0x585/0x7d0 [ 511.050880][T20129] ? file_open_root+0x400/0x400 [ 511.055732][T20129] ? __mutex_unlock_slowpath+0xe2/0x660 [ 511.061275][T20129] ? wait_for_completion+0x270/0x270 [ 511.066555][T20129] ? __this_cpu_preempt_check+0x28/0x190 [ 511.072177][T20129] ? __sb_end_write+0x101/0x1d0 [ 511.077017][T20129] do_sys_open+0xc3/0x140 [ 511.081330][T20129] ? filp_open+0x70/0x70 [ 511.085564][T20129] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 511.091742][T20129] ? do_syscall_64+0x21/0x7d0 [ 511.096555][T20129] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 511.102549][T20129] do_syscall_64+0xf6/0x7d0 [ 511.107073][T20129] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 511.112976][T20129] RIP: 0033:0x45ca59 [ 511.116973][T20129] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 511.136565][T20129] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.144989][T20129] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 511.152975][T20129] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 511.160936][T20129] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 511.168986][T20129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 511.176945][T20129] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 511.193506][ T3562] usb 2-1: USB disconnect, device number 91 [ 511.211235][ T8725] usb 5-1: USB disconnect, device number 118 [ 511.964299][ T3562] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 512.204269][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 512.324463][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 512.333096][ T3562] usb 2-1: config 0 has no interface number 0 [ 512.341561][ T3562] usb 2-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x41, skipping [ 512.353179][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 512.363989][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=4002, bcdDevice=67.c5 [ 512.373706][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.383223][ T3562] usb 2-1: config 0 descriptor?? [ 512.405600][T20170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 512.413666][T20170] raw-gadget gadget: fail, usb_ep_enable returned -22 23:04:43 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000f00200100"}}}}}, 0x0) 23:04:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:43 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) 23:04:43 executing program 4 (fault-call:4 fault-nth:22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 512.644534][ T3562] usb 2-1: USB disconnect, device number 92 23:04:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501002400200100"}}}}}, 0x0) 23:04:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501003800200100"}}}}}, 0x0) 23:04:44 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501004000200100"}}}}}, 0x0) 23:04:44 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000200200100"}}}}}, 0x0) [ 513.015189][ T8725] usb 5-1: new high-speed USB device number 119 using dummy_hcd 23:04:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:44 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:44 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000300200100"}}}}}, 0x0) [ 513.174305][ T3562] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 513.284288][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 513.404492][ T8725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.416303][ T8725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.424326][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 513.428402][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 513.440399][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.451336][ T8725] usb 5-1: config 0 descriptor?? 23:04:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) [ 513.544450][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 513.552612][ T3562] usb 2-1: config 0 has no interface number 0 [ 513.560435][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 513.575982][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 513.587100][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 513.597937][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 513.608073][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.623762][ T3562] usb 2-1: config 0 descriptor?? [ 513.654505][T20206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 513.661494][T20206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 513.736027][T20192] FAULT_INJECTION: forcing a failure. [ 513.736027][T20192] name failslab, interval 1, probability 0, space 0, times 0 [ 513.760106][T20192] CPU: 1 PID: 20192 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 513.768566][T20192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.780018][T20192] Call Trace: [ 513.783324][T20192] dump_stack+0x188/0x20d [ 513.787677][T20192] should_fail.cold+0x5/0xa [ 513.792290][T20192] ? fault_create_debugfs_attr+0x140/0x140 [ 513.798134][T20192] should_failslab+0x5/0xf [ 513.802658][T20192] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 513.809178][T20192] ? mark_held_locks+0x9f/0xe0 [ 513.814084][T20192] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 513.819938][T20192] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 513.830282][T20192] snd_seq_port_connect+0x5d/0x510 [ 513.835508][T20192] ? _raw_read_unlock+0x24/0x40 [ 513.840385][T20192] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 513.846046][T20192] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 513.852060][T20192] snd_seq_kernel_client_ctl+0xeb/0x130 [ 513.857754][T20192] snd_seq_oss_midi_open+0x50a/0x670 [ 513.863062][T20192] ? snd_seq_oss_midi_setup+0x50/0x50 [ 513.868572][T20192] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 513.874408][T20192] ? get_mdev+0x75/0x90 [ 513.878596][T20192] ? get_mididev.isra.0+0x76/0xa0 [ 513.883644][T20192] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 513.891850][T20192] snd_seq_oss_open+0x7fa/0x980 [ 513.896941][T20192] odev_open+0x6c/0x90 [ 513.901033][T20192] ? odev_release+0x70/0x70 [ 513.905566][T20192] soundcore_open+0x446/0x600 [ 513.910526][T20192] ? sound_devnode+0xf0/0xf0 [ 513.915135][T20192] chrdev_open+0x219/0x5c0 [ 513.919573][T20192] ? cdev_put.part.0+0x50/0x50 [ 513.924364][T20192] ? security_file_open+0x84/0x410 [ 513.929683][T20192] do_dentry_open+0x546/0x1340 [ 513.934701][T20192] ? cdev_put.part.0+0x50/0x50 [ 513.939498][T20192] ? security_inode_permission+0xc4/0xf0 [ 513.945177][T20192] ? chown_common+0x550/0x550 [ 513.950759][T20192] ? inode_permission+0xab/0x500 [ 513.955729][T20192] path_openat+0x1e59/0x27d0 [ 513.960350][T20192] ? path_lookupat.isra.0+0x530/0x530 [ 513.965857][T20192] ? lock_acquire+0x1f2/0x8f0 [ 513.970736][T20192] do_filp_open+0x192/0x260 [ 513.975474][T20192] ? may_open_dev+0xf0/0xf0 [ 513.980004][T20192] ? do_raw_spin_lock+0x129/0x2e0 [ 513.985055][T20192] ? _raw_spin_unlock+0x24/0x40 [ 513.989918][T20192] ? __alloc_fd+0x46d/0x600 [ 513.994456][T20192] do_sys_openat2+0x585/0x7d0 [ 513.999184][T20192] ? file_open_root+0x400/0x400 [ 514.004087][T20192] ? __mutex_unlock_slowpath+0xe2/0x660 [ 514.010093][T20192] ? wait_for_completion+0x270/0x270 [ 514.015490][T20192] ? __this_cpu_preempt_check+0x28/0x190 [ 514.021140][T20192] ? __sb_end_write+0x101/0x1d0 [ 514.026011][T20192] do_sys_open+0xc3/0x140 [ 514.030353][T20192] ? filp_open+0x70/0x70 [ 514.034644][T20192] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 514.040644][T20192] ? do_syscall_64+0x21/0x7d0 [ 514.045379][T20192] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 514.051387][T20192] do_syscall_64+0xf6/0x7d0 [ 514.055909][T20192] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 514.061816][T20192] RIP: 0033:0x45ca59 [ 514.065749][T20192] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 514.087326][T20192] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 514.096039][T20192] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 514.104016][T20192] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 514.112239][T20192] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 514.120288][T20192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 514.128270][T20192] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 514.147448][ T17] usb 5-1: USB disconnect, device number 119 23:04:45 executing program 4 (fault-call:4 fault-nth:23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 514.983887][ T17] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 515.234969][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 515.376341][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.386890][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.397169][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 515.406860][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.420399][ T17] usb 5-1: config 0 descriptor?? [ 515.670908][T20259] FAULT_INJECTION: forcing a failure. [ 515.670908][T20259] name failslab, interval 1, probability 0, space 0, times 0 [ 515.684060][T20259] CPU: 0 PID: 20259 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 515.692482][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.702844][T20259] Call Trace: [ 515.706133][T20259] dump_stack+0x188/0x20d [ 515.710670][T20259] should_fail.cold+0x5/0xa [ 515.715454][T20259] ? fault_create_debugfs_attr+0x140/0x140 [ 515.721456][T20259] should_failslab+0x5/0xf [ 515.725872][T20259] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 515.731338][T20259] ? mark_held_locks+0x9f/0xe0 [ 515.736916][T20259] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 515.742735][T20259] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 515.749001][T20259] snd_seq_port_connect+0x5d/0x510 [ 515.754134][T20259] ? _raw_read_unlock+0x24/0x40 [ 515.759005][T20259] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 515.759053][ T17] usb 2-1: USB disconnect, device number 93 [ 515.764388][T20259] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 515.764412][T20259] snd_seq_kernel_client_ctl+0xeb/0x130 [ 515.764432][T20259] snd_seq_oss_midi_open+0x3ee/0x670 [ 515.764449][T20259] ? snd_seq_oss_midi_setup+0x50/0x50 [ 515.764462][T20259] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 515.764488][T20259] ? get_mdev+0x75/0x90 [ 515.803481][T20259] ? get_mididev.isra.0+0x76/0xa0 [ 515.808661][T20259] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 515.814590][T20259] snd_seq_oss_open+0x7fa/0x980 [ 515.819588][T20259] odev_open+0x6c/0x90 [ 515.823674][T20259] ? odev_release+0x70/0x70 [ 515.828264][T20259] soundcore_open+0x446/0x600 [ 515.833241][T20259] ? sound_devnode+0xf0/0xf0 [ 515.838030][T20259] chrdev_open+0x219/0x5c0 [ 515.842473][T20259] ? cdev_put.part.0+0x50/0x50 [ 515.847306][T20259] ? security_file_open+0x84/0x410 [ 515.852443][T20259] do_dentry_open+0x546/0x1340 [ 515.857281][T20259] ? cdev_put.part.0+0x50/0x50 [ 515.862098][T20259] ? security_inode_permission+0xc4/0xf0 [ 515.867753][T20259] ? chown_common+0x550/0x550 [ 515.872464][T20259] ? inode_permission+0xab/0x500 [ 515.877477][T20259] path_openat+0x1e59/0x27d0 [ 515.882207][T20259] ? path_lookupat.isra.0+0x530/0x530 [ 515.887618][T20259] do_filp_open+0x192/0x260 [ 515.892447][T20259] ? may_open_dev+0xf0/0xf0 [ 515.897070][T20259] ? do_raw_spin_lock+0x129/0x2e0 [ 515.902127][T20259] ? _raw_spin_unlock+0x24/0x40 [ 515.907007][T20259] ? __alloc_fd+0x46d/0x600 [ 515.911622][T20259] do_sys_openat2+0x585/0x7d0 [ 515.917025][T20259] ? file_open_root+0x400/0x400 [ 515.921895][T20259] ? __mutex_unlock_slowpath+0xe2/0x660 [ 515.927659][T20259] ? wait_for_completion+0x270/0x270 [ 515.932961][T20259] ? __this_cpu_preempt_check+0x28/0x190 [ 515.938622][T20259] ? __sb_end_write+0x101/0x1d0 [ 515.943588][T20259] do_sys_open+0xc3/0x140 [ 515.948202][T20259] ? filp_open+0x70/0x70 [ 515.952469][T20259] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 515.958471][T20259] ? do_syscall_64+0x21/0x7d0 [ 515.963169][T20259] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 515.969173][T20259] do_syscall_64+0xf6/0x7d0 [ 515.973703][T20259] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 515.979608][T20259] RIP: 0033:0x45ca59 [ 515.983525][T20259] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 516.003432][T20259] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.012122][T20259] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 23:04:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002002}) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1f6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:04:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000400200100"}}}}}, 0x0) 23:04:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:47 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) 23:04:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$session_to_parent(0x12) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12018000f1b6df086a080200c567000000de08022400010000000009040200023c0900007fb48f52080700000009058c0a08"], 0x0) [ 516.020987][T20259] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 516.029822][T20259] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 516.037810][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 516.045896][T20259] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 23:04:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000600200100"}}}}}, 0x0) 23:04:47 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x20000001}) 23:04:47 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000700200100"}}}}}, 0x0) [ 516.480444][ T17] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 516.525089][ T3583] usb 5-1: USB disconnect, device number 120 [ 516.753776][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 516.804199][ T17] usb 2-1: too many configurations: 222, using maximum allowed: 8 [ 516.904147][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 516.913435][ T17] usb 2-1: can't read configurations, error -22 23:04:48 executing program 4 (fault-call:4 fault-nth:24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x20000001}) 23:04:48 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:48 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000800200100"}}}}}, 0x0) 23:04:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 517.067798][ T17] usb 2-1: new high-speed USB device number 95 using dummy_hcd 23:04:48 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000b00200100"}}}}}, 0x0) [ 517.342512][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 517.383959][ T17] usb 2-1: too many configurations: 222, using maximum allowed: 8 [ 517.453708][ T2506] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 517.487960][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 517.497332][ T17] usb 2-1: can't read configurations, error -22 [ 517.506436][ T17] usb usb2-port1: attempt power cycle [ 517.703680][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 517.823701][ T2506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.839014][ T2506] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.849548][ T2506] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 517.863562][ T2506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.882594][ T2506] usb 5-1: config 0 descriptor?? [ 518.127976][T20329] FAULT_INJECTION: forcing a failure. [ 518.127976][T20329] name failslab, interval 1, probability 0, space 0, times 0 [ 518.144182][T20329] CPU: 1 PID: 20329 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 518.153413][T20329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.164458][T20329] Call Trace: [ 518.167813][T20329] dump_stack+0x188/0x20d [ 518.172413][T20329] should_fail.cold+0x5/0xa [ 518.177407][T20329] ? fault_create_debugfs_attr+0x140/0x140 [ 518.183626][T20329] should_failslab+0x5/0xf [ 518.188061][T20329] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 518.194001][T20329] ? mark_held_locks+0x9f/0xe0 [ 518.199041][T20329] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 518.205353][T20329] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 518.211738][T20329] snd_seq_port_connect+0x5d/0x510 [ 518.217065][T20329] ? _raw_read_unlock+0x24/0x40 [ 518.222263][T20329] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 518.228005][T20329] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 518.234236][T20329] snd_seq_kernel_client_ctl+0xeb/0x130 [ 518.240818][T20329] snd_seq_oss_midi_open+0x50a/0x670 [ 518.246483][T20329] ? snd_seq_oss_midi_setup+0x50/0x50 [ 518.252193][T20329] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 518.258015][T20329] ? get_mdev+0x75/0x90 [ 518.262460][T20329] ? get_mididev.isra.0+0x76/0xa0 [ 518.267508][T20329] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 518.273631][T20329] snd_seq_oss_open+0x7fa/0x980 [ 518.278579][T20329] odev_open+0x6c/0x90 [ 518.283207][T20329] ? odev_release+0x70/0x70 [ 518.287727][T20329] soundcore_open+0x446/0x600 [ 518.292785][T20329] ? sound_devnode+0xf0/0xf0 [ 518.298055][T20329] chrdev_open+0x219/0x5c0 [ 518.302738][T20329] ? cdev_put.part.0+0x50/0x50 [ 518.307887][T20329] ? security_file_open+0x84/0x410 [ 518.314105][T20329] do_dentry_open+0x546/0x1340 [ 518.319821][T20329] ? cdev_put.part.0+0x50/0x50 [ 518.325111][T20329] ? security_inode_permission+0xc4/0xf0 [ 518.330929][T20329] ? chown_common+0x550/0x550 [ 518.336055][T20329] ? inode_permission+0xab/0x500 [ 518.341836][T20329] path_openat+0x1e59/0x27d0 [ 518.347070][T20329] ? path_lookupat.isra.0+0x530/0x530 [ 518.352804][T20329] do_filp_open+0x192/0x260 [ 518.357551][T20329] ? may_open_dev+0xf0/0xf0 [ 518.362298][T20329] ? do_raw_spin_lock+0x129/0x2e0 [ 518.367869][T20329] ? _raw_spin_unlock+0x24/0x40 [ 518.373020][T20329] ? __alloc_fd+0x46d/0x600 [ 518.378109][T20329] do_sys_openat2+0x585/0x7d0 [ 518.383862][T20329] ? file_open_root+0x400/0x400 [ 518.389518][T20329] ? __mutex_unlock_slowpath+0xe2/0x660 [ 518.395834][T20329] ? wait_for_completion+0x270/0x270 [ 518.401868][T20329] ? __this_cpu_preempt_check+0x28/0x190 [ 518.408134][T20329] ? __sb_end_write+0x101/0x1d0 [ 518.413654][T20329] do_sys_open+0xc3/0x140 [ 518.418177][T20329] ? filp_open+0x70/0x70 [ 518.422542][T20329] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 518.429013][T20329] ? do_syscall_64+0x21/0x7d0 [ 518.434473][T20329] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 518.440728][T20329] do_syscall_64+0xf6/0x7d0 [ 518.445556][T20329] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 518.451848][T20329] RIP: 0033:0x45ca59 [ 518.457703][T20329] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 518.479979][T20329] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.490004][T20329] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 518.498833][T20329] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 518.507504][T20329] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 518.517733][T20329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 518.526587][T20329] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 518.543427][ T17] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 518.564245][ T2506] usb 5-1: USB disconnect, device number 121 [ 518.656014][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 518.694709][ T17] usb 2-1: too many configurations: 222, using maximum allowed: 8 [ 518.793543][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 518.802659][ T17] usb 2-1: can't read configurations, error -22 [ 518.964614][ T17] usb 2-1: new high-speed USB device number 97 using dummy_hcd 23:04:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x20000001}) 23:04:50 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000f00200100"}}}}}, 0x0) 23:04:50 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) getpgrp(r4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000000)={0x3, 0x1, [0x800000, 0x7ff, 0x400, 0x4, 0x10004, 0x7f, 0x6]}) 23:04:50 executing program 4 (fault-call:4 fault-nth:25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 519.093604][ T17] usb 2-1: device descriptor read/8, error -71 23:04:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501002400200100"}}}}}, 0x0) 23:04:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) [ 519.303599][ T17] usb 2-1: device descriptor read/8, error -71 23:04:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501003800200100"}}}}}, 0x0) 23:04:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) 23:04:50 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 519.435718][ T17] usb usb2-port1: unable to enumerate USB device [ 519.463363][ T2506] usb 5-1: new high-speed USB device number 122 using dummy_hcd 23:04:50 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000003200100"}}}}}, 0x0) 23:04:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) setreuid(r2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) [ 519.723771][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 519.829934][ T17] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 519.845042][ T2506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.873924][ T2506] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.928898][ T2506] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 519.953307][ T2506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:04:51 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:51 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000006200100"}}}}}, 0x0) 23:04:51 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 519.993862][ T2506] usb 5-1: config 0 descriptor?? [ 520.103850][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 520.243550][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 520.244290][T20361] FAULT_INJECTION: forcing a failure. [ 520.244290][T20361] name failslab, interval 1, probability 0, space 0, times 0 [ 520.252376][ T17] usb 2-1: config 0 has no interface number 0 [ 520.272676][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 520.284618][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 520.295414][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 520.314462][T20361] CPU: 1 PID: 20361 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 520.323171][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.335314][T20361] Call Trace: [ 520.339015][T20361] dump_stack+0x188/0x20d [ 520.343397][T20361] should_fail.cold+0x5/0xa [ 520.348212][T20361] ? fault_create_debugfs_attr+0x140/0x140 [ 520.354474][T20361] should_failslab+0x5/0xf [ 520.359592][T20361] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 520.365083][T20361] ? mark_held_locks+0x9f/0xe0 [ 520.371168][T20361] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 520.377437][T20361] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 520.384043][T20361] snd_seq_port_connect+0x5d/0x510 [ 520.389351][T20361] ? _raw_read_unlock+0x24/0x40 [ 520.394562][T20361] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 520.400161][T20361] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 520.406172][T20361] snd_seq_kernel_client_ctl+0xeb/0x130 [ 520.412032][T20361] snd_seq_oss_midi_open+0x3ee/0x670 [ 520.417514][T20361] ? snd_seq_oss_midi_setup+0x50/0x50 [ 520.423031][T20361] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 520.428943][T20361] ? get_mdev+0x75/0x90 [ 520.433341][T20361] ? get_mididev.isra.0+0x76/0xa0 [ 520.439369][T20361] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 520.445386][T20361] snd_seq_oss_open+0x7fa/0x980 [ 520.450705][T20361] odev_open+0x6c/0x90 [ 520.455053][T20361] ? odev_release+0x70/0x70 [ 520.459673][T20361] soundcore_open+0x446/0x600 [ 520.464451][T20361] ? sound_devnode+0xf0/0xf0 [ 520.469316][T20361] chrdev_open+0x219/0x5c0 [ 520.473947][T20361] ? cdev_put.part.0+0x50/0x50 [ 520.479004][T20361] ? security_file_open+0x84/0x410 [ 520.484770][T20361] do_dentry_open+0x546/0x1340 [ 520.489662][T20361] ? cdev_put.part.0+0x50/0x50 [ 520.495422][T20361] ? security_inode_permission+0xc4/0xf0 [ 520.502727][T20361] ? chown_common+0x550/0x550 [ 520.508686][T20361] ? inode_permission+0xab/0x500 [ 520.514882][T20361] path_openat+0x1e59/0x27d0 [ 520.519811][T20361] ? path_lookupat.isra.0+0x530/0x530 [ 520.525692][T20361] ? lock_acquire+0x1f2/0x8f0 [ 520.530581][T20361] do_filp_open+0x192/0x260 [ 520.535519][T20361] ? may_open_dev+0xf0/0xf0 [ 520.540474][T20361] ? do_raw_spin_lock+0x129/0x2e0 [ 520.545737][T20361] ? _raw_spin_unlock+0x24/0x40 [ 520.551019][T20361] ? __alloc_fd+0x46d/0x600 [ 520.555654][T20361] do_sys_openat2+0x585/0x7d0 [ 520.560533][T20361] ? file_open_root+0x400/0x400 [ 520.565582][T20361] ? __mutex_unlock_slowpath+0xe2/0x660 [ 520.571522][T20361] ? wait_for_completion+0x270/0x270 [ 520.577211][T20361] ? __this_cpu_preempt_check+0x28/0x190 [ 520.583152][T20361] ? __sb_end_write+0x101/0x1d0 [ 520.588217][T20361] do_sys_open+0xc3/0x140 [ 520.592565][T20361] ? filp_open+0x70/0x70 [ 520.596840][T20361] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 520.603515][T20361] ? do_syscall_64+0x21/0x7d0 [ 520.608934][T20361] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 520.615641][T20361] do_syscall_64+0xf6/0x7d0 [ 520.620255][T20361] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 520.626259][T20361] RIP: 0033:0x45ca59 [ 520.630495][T20361] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 520.650899][T20361] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.659516][T20361] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 520.669482][T20361] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 520.677953][T20361] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 520.687181][T20361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 520.696478][T20361] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 520.723302][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 520.743649][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.769602][ T2506] usb 5-1: USB disconnect, device number 122 [ 520.772483][ T17] usb 2-1: config 0 descriptor?? [ 520.823853][T20360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.831284][T20360] raw-gadget gadget: fail, usb_ep_enable returned -22 23:04:52 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x40002002}) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f00000001c0)=""/106) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)={0x4, 0x2, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 521.090969][ T2506] usb 2-1: USB disconnect, device number 98 23:04:52 executing program 4 (fault-call:4 fault-nth:26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 23:04:52 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000007200100"}}}}}, 0x0) 23:04:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) 23:04:52 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:52 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:52 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000b200100"}}}}}, 0x0) 23:04:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) 23:04:52 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, 0x0, 0x0, 0x0) 23:04:52 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000f200100"}}}}}, 0x0) [ 521.573129][ T2506] usb 2-1: new high-speed USB device number 99 using dummy_hcd 23:04:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r3, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) [ 521.663136][ T3583] usb 5-1: new high-speed USB device number 123 using dummy_hcd 23:04:52 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000024200100"}}}}}, 0x0) [ 521.823030][ T2506] usb 2-1: Using ep0 maxpacket: 8 [ 521.933349][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 521.944788][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 521.952809][ T2506] usb 2-1: config 0 has no interface number 0 [ 521.988691][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 522.035230][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 522.053176][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.075421][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.094889][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 522.121937][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 522.137004][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 522.153299][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.167479][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.186755][ T3583] usb 5-1: config 0 descriptor?? [ 522.197927][ T2506] usb 2-1: config 0 descriptor?? [ 522.233467][T20441] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.269380][T20441] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.450089][T20453] FAULT_INJECTION: forcing a failure. [ 522.450089][T20453] name failslab, interval 1, probability 0, space 0, times 0 [ 522.468548][T20453] CPU: 0 PID: 20453 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 522.476922][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.487101][T20453] Call Trace: [ 522.490409][T20453] dump_stack+0x188/0x20d [ 522.494762][T20453] should_fail.cold+0x5/0xa [ 522.499289][T20453] ? fault_create_debugfs_attr+0x140/0x140 [ 522.505555][T20453] should_failslab+0x5/0xf [ 522.509986][T20453] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 522.515376][T20453] ? mark_held_locks+0x9f/0xe0 [ 522.520151][T20453] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 522.525982][T20453] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 522.532848][T20453] snd_seq_port_connect+0x5d/0x510 [ 522.537975][T20453] ? _raw_read_unlock+0x24/0x40 [ 522.542847][T20453] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 522.548269][T20453] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 522.554219][T20453] snd_seq_kernel_client_ctl+0xeb/0x130 [ 522.559792][T20453] snd_seq_oss_midi_open+0x3ee/0x670 [ 522.565182][T20453] ? snd_seq_oss_midi_setup+0x50/0x50 [ 522.570706][T20453] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 522.576514][T20453] ? get_mdev+0x75/0x90 [ 522.580671][T20453] ? get_mididev.isra.0+0x76/0xa0 [ 522.585704][T20453] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 522.592044][T20453] snd_seq_oss_open+0x7fa/0x980 [ 522.596907][T20453] odev_open+0x6c/0x90 [ 522.600959][T20453] ? odev_release+0x70/0x70 [ 522.608247][T20453] soundcore_open+0x446/0x600 [ 522.612916][T20453] ? sound_devnode+0xf0/0xf0 [ 522.617499][T20453] chrdev_open+0x219/0x5c0 [ 522.621918][T20453] ? cdev_put.part.0+0x50/0x50 [ 522.626674][T20453] ? security_file_open+0x84/0x410 [ 522.631813][T20453] do_dentry_open+0x546/0x1340 [ 522.636565][T20453] ? cdev_put.part.0+0x50/0x50 [ 522.641316][T20453] ? security_inode_permission+0xc4/0xf0 [ 522.647057][T20453] ? chown_common+0x550/0x550 [ 522.651901][T20453] ? inode_permission+0xab/0x500 [ 522.656876][T20453] path_openat+0x1e59/0x27d0 [ 522.661591][T20453] ? path_lookupat.isra.0+0x530/0x530 [ 522.666970][T20453] ? lock_acquire+0x1f2/0x8f0 [ 522.671768][T20453] do_filp_open+0x192/0x260 [ 522.676275][T20453] ? may_open_dev+0xf0/0xf0 [ 522.680806][T20453] ? do_raw_spin_lock+0x129/0x2e0 [ 522.685845][T20453] ? _raw_spin_unlock+0x24/0x40 [ 522.690684][T20453] ? __alloc_fd+0x46d/0x600 [ 522.695194][T20453] do_sys_openat2+0x585/0x7d0 [ 522.699968][T20453] ? file_open_root+0x400/0x400 [ 522.705297][T20453] ? __mutex_unlock_slowpath+0xe2/0x660 [ 522.710841][T20453] ? wait_for_completion+0x270/0x270 [ 522.717272][T20453] ? __this_cpu_preempt_check+0x28/0x190 [ 522.722919][T20453] ? __sb_end_write+0x101/0x1d0 [ 522.727767][T20453] do_sys_open+0xc3/0x140 [ 522.732098][T20453] ? filp_open+0x70/0x70 [ 522.736424][T20453] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 522.742408][T20453] ? do_syscall_64+0x21/0x7d0 [ 522.747083][T20453] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 522.753065][T20453] do_syscall_64+0xf6/0x7d0 [ 522.757568][T20453] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 522.763467][T20453] RIP: 0033:0x45ca59 [ 522.767354][T20453] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.787031][T20453] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.795426][T20453] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 522.803381][T20453] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 522.811348][T20453] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 522.819568][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 522.827543][T20453] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 522.850013][ T2506] usb 5-1: USB disconnect, device number 123 23:04:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) 23:04:55 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, 0x0, 0x0, 0x0) 23:04:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000038200100"}}}}}, 0x0) 23:04:55 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:55 executing program 4 (fault-call:4 fault-nth:27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 524.160014][ T2574] usb 2-1: USB disconnect, device number 99 23:04:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) ioctl$FBIOGET_VSCREENINFO(r7, 0x4600, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff00000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c040}, 0xbb9afb1eb179918e) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1eb0fc327ad0ff81185c688fcfa76af8fb6df086a080200c5670000000109022400010000000009040200023c09"], 0x0) 23:04:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) 23:04:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000040200100"}}}}}, 0x0) 23:04:55 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, 0x0, 0x0, 0x0) 23:04:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000002200100"}}}}}, 0x0) 23:04:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) [ 524.532855][ T8725] usb 5-1: new high-speed USB device number 124 using dummy_hcd 23:04:55 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501003800200100"}}}}}, 0x0) 23:04:55 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000003200100"}}}}}, 0x0) 23:04:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) [ 524.702984][ T17] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 524.772747][ T8725] usb 5-1: Using ep0 maxpacket: 8 23:04:56 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 524.895122][ T8725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.938561][ T8725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.969065][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 524.982819][ T17] usb 2-1: device descriptor read/64, error 18 [ 525.008036][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.059135][ T8725] usb 5-1: config 0 descriptor?? 23:04:56 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 525.324494][T20524] FAULT_INJECTION: forcing a failure. [ 525.324494][T20524] name failslab, interval 1, probability 0, space 0, times 0 [ 525.352663][T20524] CPU: 1 PID: 20524 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 525.361028][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.371266][T20524] Call Trace: [ 525.374571][T20524] dump_stack+0x188/0x20d [ 525.378915][T20524] should_fail.cold+0x5/0xa [ 525.383434][T20524] ? fault_create_debugfs_attr+0x140/0x140 [ 525.389265][T20524] should_failslab+0x5/0xf [ 525.393693][T20524] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 525.399075][T20524] ? mark_held_locks+0x9f/0xe0 [ 525.403862][T20524] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 525.409695][T20524] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.415706][T20524] snd_seq_port_connect+0x5d/0x510 [ 525.420832][T20524] ? _raw_read_unlock+0x24/0x40 [ 525.425774][T20524] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 525.431161][T20524] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 525.437071][T20524] snd_seq_kernel_client_ctl+0xeb/0x130 [ 525.442622][T20524] snd_seq_oss_midi_open+0x3ee/0x670 [ 525.447915][T20524] ? snd_seq_oss_midi_setup+0x50/0x50 [ 525.453294][T20524] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 525.459127][T20524] ? get_mdev+0x75/0x90 [ 525.463289][T20524] ? get_mididev.isra.0+0x76/0xa0 [ 525.468324][T20524] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 525.474238][T20524] snd_seq_oss_open+0x7fa/0x980 [ 525.479360][T20524] odev_open+0x6c/0x90 [ 525.483441][T20524] ? odev_release+0x70/0x70 [ 525.487960][T20524] soundcore_open+0x446/0x600 [ 525.492670][T20524] ? sound_devnode+0xf0/0xf0 [ 525.497286][T20524] chrdev_open+0x219/0x5c0 [ 525.501708][T20524] ? cdev_put.part.0+0x50/0x50 [ 525.506542][T20524] ? security_file_open+0x84/0x410 [ 525.511661][T20524] do_dentry_open+0x546/0x1340 [ 525.516431][T20524] ? cdev_put.part.0+0x50/0x50 [ 525.522308][T20524] ? security_inode_permission+0xc4/0xf0 [ 525.527950][T20524] ? chown_common+0x550/0x550 [ 525.532633][T20524] ? inode_permission+0xab/0x500 [ 525.537583][T20524] path_openat+0x1e59/0x27d0 [ 525.542189][T20524] ? path_lookupat.isra.0+0x530/0x530 [ 525.547673][T20524] do_filp_open+0x192/0x260 [ 525.552211][T20524] ? may_open_dev+0xf0/0xf0 [ 525.557768][T20524] ? do_raw_spin_lock+0x129/0x2e0 [ 525.562809][T20524] ? _raw_spin_unlock+0x24/0x40 [ 525.567663][T20524] ? __alloc_fd+0x46d/0x600 [ 525.572182][T20524] do_sys_openat2+0x585/0x7d0 [ 525.576869][T20524] ? file_open_root+0x400/0x400 [ 525.581724][T20524] ? __mutex_unlock_slowpath+0xe2/0x660 [ 525.587298][T20524] ? wait_for_completion+0x270/0x270 [ 525.592763][T20524] ? __this_cpu_preempt_check+0x28/0x190 [ 525.598404][T20524] ? __sb_end_write+0x101/0x1d0 [ 525.603295][T20524] do_sys_open+0xc3/0x140 [ 525.607638][T20524] ? filp_open+0x70/0x70 [ 525.611940][T20524] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.618275][T20524] ? do_syscall_64+0x21/0x7d0 [ 525.622956][T20524] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.628946][T20524] do_syscall_64+0xf6/0x7d0 [ 525.633457][T20524] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 525.639348][T20524] RIP: 0033:0x45ca59 [ 525.643253][T20524] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 525.662950][T20524] RSP: 002b:00007fc8f4ddbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.671371][T20524] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 525.679352][T20524] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 525.687333][T20524] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 525.695314][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 525.703292][T20524] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4ddc6d4 [ 525.723231][ T17] usb 2-1: device descriptor read/64, error 18 [ 525.793080][ T2574] usb 5-1: USB disconnect, device number 124 [ 525.992552][ T17] usb 2-1: new high-speed USB device number 101 using dummy_hcd 23:04:57 executing program 4 (fault-call:4 fault-nth:28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 526.272664][ T17] usb 2-1: device descriptor read/64, error 18 [ 526.622504][ T2574] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 526.662559][ T17] usb 2-1: device descriptor read/64, error 18 [ 526.782733][ T17] usb usb2-port1: attempt power cycle [ 526.882451][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 527.012602][ T2574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.022897][ T2574] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.032019][ T2574] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 527.041509][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.054782][ T2574] usb 5-1: config 0 descriptor?? 23:04:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000014b09022400010000000009040200023c0900000905011208070055e57f35a80000737ad3939af44e4b4013c700b76df707c06327d705d361334e233cfbe11e9c80606335ee486f61b66ec4f5bc4c0af22c8f4e0ebdd661771dc9c96cca84a218a4b330e994d91548210f0ab007bc105c45ff3e2235a7833016ed08bfa4332b05000000d0f7c7a39a635d30d6090fa46333fc42800000004ebeaa693174c63095f0f5f17beda82bd808c8d754f4667cc4d3a6810a0bc716c96efe249bd422c50fb3b90c0a171d78ac66b698a072d9fdde23eaed9fb0ddc2e62ca561ba6c2800000000000000"], 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000100)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) 23:04:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) 23:04:58 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000004200100"}}}}}, 0x0) 23:04:58 executing program 0 (fault-call:9 fault-nth:0): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:04:58 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 527.301242][ T2574] usb 5-1: USB disconnect, device number 125 23:04:58 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000006200100"}}}}}, 0x0) 23:04:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) [ 527.482188][T20589] FAULT_INJECTION: forcing a failure. [ 527.482188][T20589] name failslab, interval 1, probability 0, space 0, times 0 [ 527.551011][T20589] CPU: 1 PID: 20589 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 527.559379][T20589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.569452][T20589] Call Trace: [ 527.572759][T20589] dump_stack+0x188/0x20d [ 527.577114][T20589] should_fail.cold+0x5/0xa [ 527.581659][T20589] ? lock_downgrade+0x840/0x840 [ 527.586529][T20589] ? fault_create_debugfs_attr+0x140/0x140 [ 527.592356][T20589] should_failslab+0x5/0xf [ 527.596812][T20589] kmem_cache_alloc_node+0x25c/0x760 [ 527.602281][T20589] ? event_sched_in.isra.0+0x606/0xc30 [ 527.607755][T20589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 527.613243][T20589] __alloc_skb+0xba/0x5a0 [ 527.617582][T20589] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 527.623235][T20589] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 527.628961][T20589] alloc_skb_with_frags+0x92/0x560 [ 527.634082][T20589] ? sock_alloc_send_pskb+0xae/0x890 [ 527.639385][T20589] sock_alloc_send_pskb+0x734/0x890 [ 527.644589][T20589] ? find_held_lock+0x2d/0x110 [ 527.649362][T20589] ? sock_wmalloc+0x120/0x120 [ 527.654219][T20589] ? lock_downgrade+0x840/0x840 [ 527.659189][T20589] ? packet_cached_dev_get+0x140/0x250 [ 527.664664][T20589] packet_sendmsg+0x195b/0x5fe0 [ 527.669629][T20589] ? aa_label_sk_perm+0x89/0xe0 [ 527.674485][T20589] ? aa_sk_perm+0x319/0xab0 [ 527.678996][T20589] ? packet_notifier+0x860/0x860 [ 527.683940][T20589] ? aa_af_perm+0x260/0x260 [ 527.688459][T20589] ? import_iovec+0x236/0x3d0 [ 527.693256][T20589] ? packet_notifier+0x860/0x860 [ 527.698256][T20589] sock_sendmsg+0xcf/0x120 [ 527.702681][T20589] ____sys_sendmsg+0x32f/0x810 [ 527.707538][T20589] ? kernel_sendmsg+0x50/0x50 [ 527.712221][T20589] ? mark_lock+0x11f/0xdd0 [ 527.716655][T20589] ___sys_sendmsg+0x100/0x170 [ 527.721334][T20589] ? debug_smp_processor_id+0x2f/0x185 [ 527.726798][T20589] ? sendmsg_copy_msghdr+0x70/0x70 [ 527.731923][T20589] ? rcu_read_lock_held_common+0xa0/0xa0 [ 527.737669][T20589] ? print_usage_bug+0x240/0x240 [ 527.742753][T20589] ? __fget_files+0x32f/0x500 [ 527.747508][T20589] ? ksys_dup3+0x3c0/0x3c0 [ 527.751937][T20589] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 527.757934][T20589] ? retint_kernel+0x2b/0x2b [ 527.762651][T20589] ? trace_hardirqs_on_caller+0x64/0x240 [ 527.768300][T20589] ? __fget_light+0x20e/0x270 [ 527.773003][T20589] __sys_sendmmsg+0x195/0x480 [ 527.777717][T20589] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 527.782747][T20589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 527.788219][T20589] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 527.794211][T20589] ? trace_hardirqs_on_caller+0x64/0x240 23:04:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 527.799868][T20589] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 527.805603][T20589] ? retint_kernel+0x2b/0x2b [ 527.810232][T20589] ? ksys_write+0x197/0x250 [ 527.814765][T20589] ? fput_many+0x2f/0x1a0 [ 527.819112][T20589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 527.825250][T20589] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 527.831251][T20589] __x64_sys_sendmmsg+0x99/0x100 [ 527.836294][T20589] do_syscall_64+0xf6/0x7d0 [ 527.840822][T20589] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 527.846725][T20589] RIP: 0033:0x45ca59 [ 527.850631][T20589] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.870243][T20589] RSP: 002b:00007f256357ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 527.878665][T20589] RAX: ffffffffffffffda RBX: 00000000004fd340 RCX: 000000000045ca59 [ 527.886649][T20589] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000005 23:04:59 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000007200100"}}}}}, 0x0) [ 527.894890][T20589] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 527.903913][T20589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 527.911897][T20589] R13: 00000000000008ff R14: 00000000004cbcf1 R15: 00007f256357b6d4 23:04:59 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000008200100"}}}}}, 0x0) [ 528.012994][ T17] usb 2-1: new high-speed USB device number 102 using dummy_hcd 23:04:59 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) 23:04:59 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 528.112502][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 528.182336][ T2574] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 528.282371][ T17] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.290267][ T17] usb 2-1: can't read configurations, error -61 [ 528.436817][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 528.482412][ T17] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 528.581415][ T2574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.582605][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 528.597129][ T2574] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.622295][ T2574] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 528.631493][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.662639][ T2574] usb 5-1: config 0 descriptor?? [ 528.762777][ T17] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.775057][ T17] usb 2-1: can't read configurations, error -61 [ 528.781575][ T17] usb usb2-port1: unable to enumerate USB device [ 528.813566][ T0] NOHZ: local_softirq_pending 08 [ 528.912356][ T2506] usb 5-1: USB disconnect, device number 126 23:05:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a670000cfb7e9483100010000000009040200023c0900000905011208070000000a058c0a08"], 0x0) 23:05:01 executing program 0 (fault-call:9 fault-nth:1): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:01 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000b200100"}}}}}, 0x0) 23:05:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) 23:05:01 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80105, 0x0) 23:05:01 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000f200100"}}}}}, 0x0) 23:05:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) [ 530.563870][T20645] FAULT_INJECTION: forcing a failure. [ 530.563870][T20645] name failslab, interval 1, probability 0, space 0, times 0 [ 530.616465][T20645] CPU: 0 PID: 20645 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 530.624844][T20645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.635008][T20645] Call Trace: [ 530.638334][T20645] dump_stack+0x188/0x20d [ 530.642682][T20645] should_fail.cold+0x5/0xa [ 530.647215][T20645] ? fault_create_debugfs_attr+0x140/0x140 [ 530.653123][T20645] should_failslab+0x5/0xf [ 530.657540][T20645] kmem_cache_alloc_node_trace+0x27c/0x790 [ 530.663864][T20645] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 530.670107][T20645] __kmalloc_node_track_caller+0x38/0x60 [ 530.675736][T20645] __kmalloc_reserve.isra.0+0x39/0xe0 [ 530.681189][T20645] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 530.686646][T20645] __alloc_skb+0xef/0x5a0 [ 530.690976][T20645] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 530.697129][T20645] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 530.702843][T20645] alloc_skb_with_frags+0x92/0x560 [ 530.707954][T20645] ? sock_alloc_send_pskb+0x102/0x890 [ 530.713328][T20645] sock_alloc_send_pskb+0x734/0x890 [ 530.718545][T20645] ? find_held_lock+0x2d/0x110 [ 530.723942][T20645] ? sock_wmalloc+0x120/0x120 [ 530.728766][T20645] ? lock_downgrade+0x840/0x840 [ 530.733820][T20645] ? rcu_read_lock_held_common+0xa0/0xa0 [ 530.740388][T20645] packet_sendmsg+0x195b/0x5fe0 [ 530.745572][T20645] ? lock_downgrade+0x840/0x840 [ 530.750719][T20645] ? aa_label_sk_perm+0x89/0xe0 [ 530.755573][T20645] ? aa_sk_perm+0x319/0xab0 [ 530.760079][T20645] ? packet_notifier+0x860/0x860 [ 530.765334][T20645] ? aa_af_perm+0x260/0x260 [ 530.770137][T20645] ? import_iovec+0x236/0x3d0 [ 530.775209][T20645] ? packet_notifier+0x860/0x860 [ 530.780318][T20645] sock_sendmsg+0xcf/0x120 [ 530.784767][T20645] ____sys_sendmsg+0x32f/0x810 [ 530.789533][T20645] ? kernel_sendmsg+0x50/0x50 [ 530.794231][T20645] ___sys_sendmsg+0x100/0x170 [ 530.799430][T20645] ? debug_smp_processor_id+0x2f/0x185 [ 530.804890][T20645] ? sendmsg_copy_msghdr+0x70/0x70 [ 530.810255][T20645] ? rcu_read_lock_held_common+0xa0/0xa0 [ 530.815882][T20645] ? retint_kernel+0x2b/0x2b [ 530.820552][T20645] ? trace_hardirqs_on_caller+0x64/0x240 [ 530.826174][T20645] ? __fget_files+0x32f/0x500 [ 530.830848][T20645] ? ksys_dup3+0x3c0/0x3c0 [ 530.835314][T20645] ? get_pid_task+0x116/0x200 [ 530.840092][T20645] ? __fget_light+0x20e/0x270 [ 530.844878][T20645] __sys_sendmmsg+0x195/0x480 [ 530.849560][T20645] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 530.854583][T20645] ? lock_downgrade+0x840/0x840 [ 530.859438][T20645] ? __mutex_unlock_slowpath+0xe2/0x660 [ 530.864999][T20645] ? wait_for_completion+0x270/0x270 [ 530.870301][T20645] ? __this_cpu_preempt_check+0x28/0x190 [ 530.875951][T20645] ? __sb_end_write+0x101/0x1d0 [ 530.880800][T20645] ? vfs_write+0x161/0x5d0 [ 530.885213][T20645] ? fput_many+0x2f/0x1a0 [ 530.889808][T20645] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 530.895948][T20645] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 530.901927][T20645] __x64_sys_sendmmsg+0x99/0x100 [ 530.906911][T20645] do_syscall_64+0xf6/0x7d0 [ 530.911464][T20645] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 530.917358][T20645] RIP: 0033:0x45ca59 [ 530.921246][T20645] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 530.940847][T20645] RSP: 002b:00007f256357ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 530.949276][T20645] RAX: ffffffffffffffda RBX: 00000000004fd340 RCX: 000000000045ca59 [ 530.958653][T20645] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000005 23:05:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000024200100"}}}}}, 0x0) [ 530.967485][T20645] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 530.975461][T20645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 530.984468][T20645] R13: 00000000000008ff R14: 00000000004cbcf1 R15: 00007f256357b6d4 [ 530.998678][ T8725] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 531.072479][ T2475] usb 2-1: new high-speed USB device number 104 using dummy_hcd 23:05:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000038200100"}}}}}, 0x0) 23:05:02 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000400100"}}}}}, 0x0) 23:05:02 executing program 0 (fault-call:9 fault-nth:2): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 531.242324][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 531.341129][ T2475] usb 2-1: Using ep0 maxpacket: 8 [ 531.363182][ T8725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.379732][ T8725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.389717][ T2475] usb 2-1: no configurations [ 531.394962][ T2475] usb 2-1: can't read configurations, error -22 [ 531.415042][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 531.438109][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.474329][ T8725] usb 5-1: config 0 descriptor?? [ 531.514273][T20667] FAULT_INJECTION: forcing a failure. [ 531.514273][T20667] name failslab, interval 1, probability 0, space 0, times 0 [ 531.527560][T20667] CPU: 0 PID: 20667 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 531.535900][T20667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.546045][T20667] Call Trace: [ 531.549340][T20667] dump_stack+0x188/0x20d [ 531.553665][T20667] should_fail.cold+0x5/0xa [ 531.558370][T20667] ? fault_create_debugfs_attr+0x140/0x140 [ 531.564177][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.569619][T20667] should_failslab+0x5/0xf [ 531.574029][T20667] kmem_cache_alloc+0x44/0x740 [ 531.578888][T20667] skb_clone+0x14d/0x3c0 [ 531.583144][T20667] dev_queue_xmit_nit+0x398/0xaa0 [ 531.588249][T20667] dev_hard_start_xmit+0xbb/0x9b0 [ 531.593256][T20667] ? validate_xmit_skb+0x82b/0xe70 [ 531.598382][T20667] __dev_queue_xmit+0x25e1/0x30a0 [ 531.603403][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.608969][T20667] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.614949][T20667] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 531.620219][T20667] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 531.625930][T20667] ? packet_parse_headers.isra.0+0x324/0x470 [ 531.631905][T20667] ? packet_parse_headers.isra.0+0x330/0x470 [ 531.637894][T20667] ? packet_parse_headers.isra.0+0x11c/0x470 [ 531.643858][T20667] ? packet_seq_start+0x150/0x150 [ 531.648883][T20667] ? packet_sendmsg+0x24eb/0x5fe0 [ 531.653909][T20667] packet_sendmsg+0x24eb/0x5fe0 [ 531.658768][T20667] ? aa_label_sk_perm+0x89/0xe0 [ 531.663619][T20667] ? aa_sk_perm+0x319/0xab0 [ 531.668130][T20667] ? packet_notifier+0x860/0x860 [ 531.673058][T20667] ? aa_af_perm+0x260/0x260 [ 531.677546][T20667] ? import_iovec+0x236/0x3d0 [ 531.682225][T20667] ? packet_notifier+0x860/0x860 [ 531.687147][T20667] sock_sendmsg+0xcf/0x120 [ 531.691545][T20667] ____sys_sendmsg+0x32f/0x810 [ 531.696335][T20667] ? kernel_sendmsg+0x50/0x50 [ 531.701003][T20667] ? retint_kernel+0x2b/0x2b [ 531.705607][T20667] ___sys_sendmsg+0x100/0x170 [ 531.710289][T20667] ? debug_smp_processor_id+0x2f/0x185 [ 531.715941][T20667] ? sendmsg_copy_msghdr+0x70/0x70 [ 531.721059][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.726505][T20667] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.732763][T20667] ? retint_kernel+0x2b/0x2b [ 531.737473][T20667] ? trace_hardirqs_on_caller+0x64/0x240 [ 531.743399][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.749419][T20667] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 531.755242][T20667] ? retint_kernel+0x2b/0x2b [ 531.759858][T20667] ? sockfd_lookup_light+0x73/0x170 [ 531.765042][T20667] ? sockfd_lookup_light+0x9c/0x170 [ 531.770227][T20667] __sys_sendmmsg+0x195/0x480 [ 531.774996][T20667] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 531.780131][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.785768][T20667] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.791737][T20667] ? trace_hardirqs_on_caller+0x64/0x240 [ 531.797459][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.802918][T20667] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.808893][T20667] ? retint_kernel+0x2b/0x2b [ 531.813480][T20667] ? trace_hardirqs_on_caller+0x64/0x240 [ 531.819098][T20667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 531.824547][T20667] ? retint_kernel+0x2b/0x2b [ 531.829129][T20667] __x64_sys_sendmmsg+0x99/0x100 [ 531.834068][T20667] do_syscall_64+0xf6/0x7d0 [ 531.838554][T20667] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 531.844516][T20667] RIP: 0033:0x45ca59 [ 531.848414][T20667] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.868368][T20667] RSP: 002b:00007f256357ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 531.877040][T20667] RAX: ffffffffffffffda RBX: 00000000004fd340 RCX: 000000000045ca59 [ 531.885228][T20667] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000005 [ 531.894154][T20667] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 531.902212][T20667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 531.910185][T20667] R13: 00000000000008ff R14: 00000000004cbcf1 R15: 00007f256357b6d4 [ 531.918587][ T2475] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 531.941170][ T2506] usb 5-1: USB disconnect, device number 127 [ 532.162436][ T2475] usb 2-1: Using ep0 maxpacket: 8 [ 532.202171][ T2475] usb 2-1: no configurations [ 532.206823][ T2475] usb 2-1: can't read configurations, error -22 [ 532.216400][ T2475] usb usb2-port1: attempt power cycle [ 532.951751][ T2475] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 533.052139][ T2475] usb 2-1: Using ep0 maxpacket: 8 [ 533.092984][ T2475] usb 2-1: no configurations [ 533.097625][ T2475] usb 2-1: can't read configurations, error -22 [ 533.251803][ T2475] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 533.341975][ T2475] usb 2-1: Using ep0 maxpacket: 8 [ 533.382166][ T2475] usb 2-1: no configurations [ 533.386905][ T2475] usb 2-1: can't read configurations, error -22 [ 533.394680][ T2475] usb usb2-port1: unable to enumerate USB device 23:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0xc0a, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffb) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:04 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:04 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200200"}}}}}, 0x0) 23:05:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:04 executing program 0 (fault-call:9 fault-nth:3): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80107, 0x0) 23:05:04 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200300"}}}}}, 0x0) 23:05:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) [ 533.588879][T20694] FAULT_INJECTION: forcing a failure. [ 533.588879][T20694] name failslab, interval 1, probability 0, space 0, times 0 [ 533.612567][T20694] CPU: 0 PID: 20694 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 533.621025][T20694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.631089][T20694] Call Trace: [ 533.634396][T20694] dump_stack+0x188/0x20d [ 533.638742][T20694] should_fail.cold+0x5/0xa [ 533.643267][T20694] ? lock_downgrade+0x840/0x840 [ 533.648138][T20694] ? fault_create_debugfs_attr+0x140/0x140 [ 533.653987][T20694] should_failslab+0x5/0xf [ 533.658421][T20694] kmem_cache_alloc_node+0x25c/0x760 [ 533.663754][T20694] ? firmware_map_remove+0x19d/0x19d [ 533.669236][T20694] __alloc_skb+0xba/0x5a0 [ 533.673673][T20694] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 533.679238][T20694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 533.684884][T20694] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 533.690880][T20694] alloc_skb_with_frags+0x92/0x560 [ 533.696006][T20694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 533.701571][T20694] sock_alloc_send_pskb+0x734/0x890 [ 533.706795][T20694] ? find_held_lock+0x2d/0x110 [ 533.711575][T20694] ? sock_wmalloc+0x120/0x120 [ 533.716400][T20694] ? lock_downgrade+0x840/0x840 [ 533.721358][T20694] ? rcu_read_lock_held_common+0xa0/0xa0 [ 533.727369][T20694] packet_sendmsg+0x195b/0x5fe0 [ 533.733031][T20694] ? smp_apic_timer_interrupt+0x1a0/0x600 [ 533.739005][T20694] ? aa_label_sk_perm+0x89/0xe0 [ 533.743883][T20694] ? aa_sk_perm+0x319/0xab0 [ 533.748497][T20694] ? packet_notifier+0x860/0x860 [ 533.753548][T20694] ? aa_af_perm+0x260/0x260 [ 533.758168][T20694] ? import_iovec+0x236/0x3d0 [ 533.762873][T20694] ? packet_notifier+0x860/0x860 [ 533.767931][T20694] sock_sendmsg+0xcf/0x120 [ 533.772892][T20694] ____sys_sendmsg+0x32f/0x810 [ 533.777678][T20694] ? kernel_sendmsg+0x50/0x50 [ 533.781665][ T8917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 533.782404][T20694] ? __lock_acquire+0x2224/0x48a0 [ 533.782430][T20694] ___sys_sendmsg+0x100/0x170 [ 533.782449][T20694] ? sendmsg_copy_msghdr+0x70/0x70 [ 533.804912][T20694] ? rcu_read_lock_held_common+0xa0/0xa0 [ 533.810563][T20694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 533.816037][T20694] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 533.822027][T20694] ? retint_kernel+0x2b/0x2b [ 533.826639][T20694] ? trace_hardirqs_on_caller+0x64/0x240 [ 533.832289][T20694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 533.838166][T20694] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 533.843958][T20694] ? retint_kernel+0x2b/0x2b [ 533.848580][T20694] __sys_sendmmsg+0x195/0x480 [ 533.853449][T20694] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 533.858661][T20694] ? lock_downgrade+0x840/0x840 [ 533.863546][T20694] ? __mutex_unlock_slowpath+0xe2/0x660 [ 533.869626][T20694] ? __sb_end_write+0xe7/0x1d0 [ 533.874430][T20694] ? wait_for_completion+0x270/0x270 [ 533.879760][T20694] ? __sb_end_write+0x101/0x1d0 [ 533.884627][T20694] ? vfs_write+0x161/0x5d0 [ 533.889070][T20694] ? fput_many+0x2f/0x1a0 [ 533.893860][T20694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 533.899333][T20694] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 533.905336][T20694] __x64_sys_sendmmsg+0x99/0x100 [ 533.912292][T20694] do_syscall_64+0xf6/0x7d0 [ 533.916811][T20694] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 533.922710][T20694] RIP: 0033:0x45ca59 [ 533.926614][T20694] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 533.946310][T20694] RSP: 002b:00007f256357ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 533.954732][T20694] RAX: ffffffffffffffda RBX: 00000000004fd340 RCX: 000000000045ca59 [ 533.962725][T20694] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000005 [ 533.970716][T20694] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 533.978697][T20694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 23:05:05 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200400"}}}}}, 0x0) [ 533.986681][T20694] R13: 00000000000008ff R14: 00000000004cbcf1 R15: 00007f256357b6d4 23:05:05 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 534.021657][ T8917] usb 5-1: Using ep0 maxpacket: 8 23:05:05 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200500"}}}}}, 0x0) 23:05:05 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200600"}}}}}, 0x0) [ 534.142347][ T8917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.161773][ T2506] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 534.167429][ T8917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.215108][ T8917] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 534.251245][ T8917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.288643][ T8917] usb 5-1: config 0 descriptor?? [ 534.451957][ T2506] usb 2-1: Using ep0 maxpacket: 8 [ 534.552627][ T3562] usb 5-1: USB disconnect, device number 2 [ 534.575636][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 534.589775][ T2506] usb 2-1: config 0 has no interface number 0 [ 534.611801][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 534.652331][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 534.688798][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 534.725346][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 534.758441][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.792180][ T2506] usb 2-1: config 0 descriptor?? [ 534.821914][T20698] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 534.836239][T20698] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 535.071817][ T3562] usb 2-1: USB disconnect, device number 108 [ 535.841435][ T8725] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 536.082448][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 536.201698][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.209771][ T8725] usb 2-1: config 0 has no interface number 0 [ 536.217839][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 536.229590][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 536.240283][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 536.250763][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 536.260604][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.276911][ T8725] usb 2-1: config 0 descriptor?? [ 536.302747][T20766] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 536.309834][T20766] raw-gadget gadget: fail, usb_ep_enable returned -22 23:05:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, r4+30000000}}, 0x0) r5 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000000)={0x2001}) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200800"}}}}}, 0x0) 23:05:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:07 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8010f, 0x0) [ 536.541797][ T3562] usb 2-1: USB disconnect, device number 109 23:05:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000201100"}}}}}, 0x0) 23:05:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000202900"}}}}}, 0x0) [ 536.891520][ T2506] usb 5-1: new high-speed USB device number 3 using dummy_hcd 23:05:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000202b00"}}}}}, 0x0) 23:05:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4) [ 537.111891][ T3562] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 537.161594][ T2506] usb 5-1: Using ep0 maxpacket: 8 [ 537.301934][ T2506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.324108][ T2506] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.360921][ T2506] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 537.370979][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 537.402971][ T2506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.417709][ T2506] usb 5-1: config 0 descriptor?? [ 537.511468][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 537.519771][ T3562] usb 2-1: config 0 has no interface number 0 [ 537.541460][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 537.561164][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 537.572124][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 537.582753][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 537.593324][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.603526][ T3562] usb 2-1: config 0 descriptor?? [ 537.621701][T20817] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 537.628875][T20817] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 537.687502][ T3583] usb 5-1: USB disconnect, device number 3 [ 538.491357][ T3583] usb 5-1: new high-speed USB device number 4 using dummy_hcd 23:05:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x40, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{r1}, 0xabe, 0x1, 0x81}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000202c00"}}}}}, 0x0) 23:05:10 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:10 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x8) 23:05:10 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80117, 0x0) [ 539.623423][ T3562] usb 2-1: USB disconnect, device number 110 23:05:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000202f00"}}}}}, 0x0) 23:05:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:11 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000203a00"}}}}}, 0x0) [ 539.971080][ T3583] usb 5-1: new high-speed USB device number 5 using dummy_hcd 23:05:11 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xa) 23:05:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) [ 540.151326][ T3562] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 540.220991][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 540.341717][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.358068][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.370111][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 540.380733][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.394028][ T3583] usb 5-1: config 0 descriptor?? [ 540.401224][ T3562] usb 2-1: Using ep0 maxpacket: 8 [ 540.540979][ T3562] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 540.549173][ T3562] usb 2-1: config 0 has no interface number 0 [ 540.582501][ T3562] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 540.602052][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 540.613736][ T3562] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 540.641030][ T3562] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 540.650355][ T3562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.668540][ T3562] usb 2-1: config 0 descriptor?? [ 540.683526][ T2506] usb 5-1: USB disconnect, device number 5 [ 540.691682][T20891] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.698659][T20891] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.921428][ T8725] usb 2-1: USB disconnect, device number 111 [ 541.700765][ T8725] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 541.940774][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 542.060737][ T8725] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 542.068908][ T8725] usb 2-1: config 0 has no interface number 0 [ 542.075206][ T8725] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 542.087083][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 542.097192][ T8725] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 542.107051][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 542.116183][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.126949][ T8725] usb 2-1: config 0 descriptor?? [ 542.151604][T20965] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.158710][T20965] raw-gadget gadget: fail, usb_ep_enable returned -22 23:05:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 23:05:13 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000203c00"}}}}}, 0x0) 23:05:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe) 23:05:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x2) [ 542.401025][ T8725] usb 2-1: USB disconnect, device number 112 23:05:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000020b701"}}}}}, 0x0) 23:05:13 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15010000002000f0"}}}}}, 0x0) 23:05:14 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 23:05:14 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15010000002089ff"}}}}}, 0x0) [ 542.790699][ T8917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 542.900645][ T8725] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 543.040820][ T8917] usb 5-1: Using ep0 maxpacket: 8 [ 543.150635][ T8725] usb 2-1: Using ep0 maxpacket: 8 [ 543.164218][ T8917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.185095][ T8917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.196806][ T8917] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 543.227544][ T8917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.251994][ T8917] usb 5-1: config 0 descriptor?? [ 543.272199][ T8725] usb 2-1: config 231 has an invalid interface number: 2 but max is 0 [ 543.280409][ T8725] usb 2-1: config 231 has an invalid descriptor of length 18, skipping remainder of the config [ 543.294502][ T8725] usb 2-1: config 231 has no interface number 0 [ 543.303331][ T8725] usb 2-1: config 231 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.317408][ T8725] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 543.327902][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.500660][ T3562] usb 5-1: USB disconnect, device number 6 [ 543.611093][ T8725] usb 2-1: string descriptor 0 read error: -71 [ 543.619423][ T8725] snd-usb-audio: probe of 2-1:231.2 failed with error -2 [ 543.628445][ T8725] usb 2-1: USB disconnect, device number 113 23:05:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200102"}}}}}, 0x0) 23:05:15 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x11) 23:05:15 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, 0x0, 0x0, 0x0) 23:05:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x3) 23:05:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, r4+30000000}}, 0x0) r5 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000000)={0x2001}) r6 = fcntl$dupfd(r1, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200103"}}}}}, 0x0) 23:05:15 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, 0x0, 0x0, 0x0) 23:05:15 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200104"}}}}}, 0x0) 23:05:15 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200106"}}}}}, 0x0) 23:05:15 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, 0x0, 0x0, 0x0) 23:05:15 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) [ 544.470863][ T8917] usb 5-1: new high-speed USB device number 7 using dummy_hcd 23:05:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x60) [ 544.537038][ T2506] usb 2-1: new high-speed USB device number 114 using dummy_hcd 23:05:15 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200107"}}}}}, 0x0) [ 544.720434][ T8917] usb 5-1: Using ep0 maxpacket: 8 [ 544.800526][ T2506] usb 2-1: Using ep0 maxpacket: 8 [ 544.841197][ T8917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.860407][ T8917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.890820][ T8917] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 544.903432][ T8917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.927966][ T8917] usb 5-1: config 0 descriptor?? [ 544.950417][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 544.958487][ T2506] usb 2-1: config 0 has no interface number 0 [ 544.983813][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 545.000768][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 545.012483][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 545.036499][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 545.046531][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.056998][ T2506] usb 2-1: config 0 descriptor?? [ 545.101001][T21077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.108001][T21077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.174501][ T3562] usb 5-1: USB disconnect, device number 7 [ 545.349355][ T2506] usb 2-1: USB disconnect, device number 114 23:05:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x4) [ 546.130288][ T8917] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 546.200257][ T3562] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 546.370227][ T8917] usb 2-1: Using ep0 maxpacket: 8 [ 546.450249][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 546.490533][ T8917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 546.498691][ T8917] usb 2-1: config 0 has no interface number 0 [ 546.505227][ T8917] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 546.516740][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 546.526980][ T8917] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 546.536881][ T8917] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 546.546287][ T8917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.559194][ T8917] usb 2-1: config 0 descriptor?? [ 546.576976][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.582408][T21163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 546.594836][T21163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 546.595757][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.624684][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 546.641154][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.658512][ T3562] usb 5-1: config 0 descriptor?? 23:05:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x12) fcntl$getflags(r2, 0x408) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ftruncate(r3, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x8) 23:05:18 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:18 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200108"}}}}}, 0x0) [ 546.830945][ T2687] usb 2-1: USB disconnect, device number 115 23:05:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x534) [ 546.907362][ T3562] usb 5-1: USB disconnect, device number 8 23:05:18 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:18 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000020010b"}}}}}, 0x0) 23:05:18 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:18 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "150100000020010f"}}}}}, 0x0) 23:05:18 executing program 3: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) dup3(r1, r0, 0x0) 23:05:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x538) 23:05:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x5) [ 547.450986][ T2687] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 547.701411][ T2687] usb 2-1: Using ep0 maxpacket: 8 [ 547.820542][ T2687] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 547.829175][ T2687] usb 2-1: config 0 has no interface number 0 [ 547.848955][ T2687] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 547.865752][ T2687] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 547.876531][ T2687] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 547.891355][ T2687] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 547.904049][ T2687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.916514][ T2687] usb 2-1: config 0 descriptor?? [ 547.920071][ T3562] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 547.950550][T21214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 547.957530][T21214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 548.177312][ T2687] usb 2-1: USB disconnect, device number 116 [ 548.190491][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 548.310177][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.320642][ T3562] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.332121][ T3562] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 548.342254][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.355335][ T3562] usb 5-1: config 0 descriptor?? [ 548.603991][ T3562] usb 5-1: USB disconnect, device number 9 23:05:19 executing program 1: sysinfo(&(0x7f0000000000)=""/52) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:19 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:19 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200124"}}}}}, 0x0) 23:05:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) read$qrtrtun(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0xfd, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 23:05:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x543) 23:05:20 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045300, &(0x7f00000002c0)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 23:05:20 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200138"}}}}}, 0x0) 23:05:20 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x33) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000085}, 0x24040890) setregid(0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'veth1_macvtap\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r5 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x29440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x7fe, 0xfffff1bd, 0x0, 0xdccf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000050400000074fddfdf2500050600", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010069703667726500001000028008000400000001000400120008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x50}}, 0x0) 23:05:20 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 548.990042][ T2574] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 549.043045][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 549.141543][T21312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.169712][T21316] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address 23:05:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x6) [ 549.190725][T21316] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 549.259957][ T2574] usb 2-1: Using ep0 maxpacket: 8 [ 549.400272][ T2574] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 549.408875][ T2574] usb 2-1: config 0 has no interface number 0 [ 549.419527][ T2574] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 549.439125][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 549.450756][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 549.489597][ T2574] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 549.500026][ T2574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.522474][ T2574] usb 2-1: config 0 descriptor?? [ 549.526343][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 549.536956][ T2475] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 549.550923][T21289] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 549.563015][T21289] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 549.787064][ T2574] usb 2-1: USB disconnect, device number 117 [ 549.799968][ T2475] usb 5-1: Using ep0 maxpacket: 8 [ 549.920196][ T2475] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.930936][ T2475] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 549.940104][ T2475] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 549.949167][ T2475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.962227][ T2475] usb 5-1: config 0 descriptor?? [ 550.207221][ T2506] usb 5-1: USB disconnect, device number 10 [ 550.589767][ T2574] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 550.840024][ T2574] usb 2-1: Using ep0 maxpacket: 8 [ 550.989875][ T2574] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 550.998197][ T2574] usb 2-1: config 0 has no interface number 0 [ 551.005518][ T2574] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 551.016679][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 551.026784][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 551.036776][ T2574] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 551.046013][ T2574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.057945][ T2574] usb 2-1: config 0 descriptor?? [ 551.081228][T21408] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 551.088829][T21408] raw-gadget gadget: fail, usb_ep_enable returned -22 23:05:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000200)={0xfffffeff, 0x1, 0x5, 0x92, &(0x7f0000000000)=""/146, 0x13, &(0x7f00000000c0)=""/19, 0xeb, &(0x7f0000000100)=""/235}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x608) 23:05:22 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:22 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x6}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 23:05:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x7) [ 551.331393][ T2574] usb 2-1: USB disconnect, device number 118 23:05:22 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:22 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:23 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:23 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 551.729805][ T2475] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 551.881497][ T2574] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 551.986428][ T2475] usb 5-1: Using ep0 maxpacket: 8 [ 552.110355][ T2475] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.126679][ T2475] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.145893][ T2475] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 552.155980][ T2475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.168832][ T2475] usb 5-1: config 0 descriptor?? [ 552.179672][ T2574] usb 2-1: Using ep0 maxpacket: 8 [ 552.299943][ T2574] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 552.308229][ T2574] usb 2-1: config 0 has no interface number 0 [ 552.349669][ T2574] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 552.373435][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 552.389771][ T2574] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 552.399913][ T2574] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 552.409088][ T2574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.423357][ T2574] usb 2-1: config 0 descriptor?? [ 552.442310][T21460] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 552.449303][T21460] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 552.458740][ T2506] usb 5-1: USB disconnect, device number 11 [ 552.688553][ T2475] usb 2-1: USB disconnect, device number 119 [ 553.459511][ T2687] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 553.699504][ T2687] usb 2-1: Using ep0 maxpacket: 8 [ 553.819816][ T2687] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 553.828029][ T2687] usb 2-1: config 0 has no interface number 0 [ 553.834747][ T2687] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 553.845880][ T2687] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 553.855963][ T2687] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 553.865968][ T2687] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 553.875234][ T2687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.887798][ T2687] usb 2-1: config 0 descriptor?? [ 553.910989][T21537] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 553.918161][T21537] raw-gadget gadget: fail, usb_ep_enable returned -22 23:05:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x689) 23:05:25 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x6}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 23:05:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x8) [ 554.149877][ T2506] usb 2-1: USB disconnect, device number 120 23:05:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40002002}) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @private=0xa010102}, 0x9, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='macvlan1\x00', 0x1, 0x1, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:25 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000001}) 23:05:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:25 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) 23:05:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x806) 23:05:25 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 554.540832][ T2574] usb 5-1: new high-speed USB device number 12 using dummy_hcd 23:05:25 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) 23:05:26 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 554.759428][ T2506] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 554.789438][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 554.909773][ T2574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.923738][ T2574] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.936630][ T2574] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 554.947262][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.962012][ T2574] usb 5-1: config 0 descriptor?? [ 555.049963][ T2506] usb 2-1: Using ep0 maxpacket: 8 23:05:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x6}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 555.179413][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 555.187915][ T2506] usb 2-1: config 0 has no interface number 0 [ 555.198634][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 555.240324][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 555.251660][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 555.263390][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 555.273492][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.288791][ T3583] usb 5-1: USB disconnect, device number 12 [ 555.300008][ T2506] usb 2-1: config 0 descriptor?? [ 555.329705][T21592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 555.336689][T21592] raw-gadget gadget: fail, usb_ep_enable returned -22 23:05:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0xa) [ 556.029272][ T3583] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 556.489229][ T3583] usb 5-1: device descriptor read/64, error -71 [ 556.879278][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 557.009214][ T3583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.019651][ T3583] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.028732][ T3583] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 557.038342][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.047765][ T3583] usb 5-1: config 0 descriptor?? 23:05:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:28 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) 23:05:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xa00) 23:05:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x6}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 557.263185][ T3583] usb 2-1: USB disconnect, device number 121 23:05:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000000)={0x2001}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x10, &(0x7f0000000200)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={r10, 0x1000, 0x6, 0x0, 0x5, 0xe4d6}, &(0x7f0000000040)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) [ 557.305278][ T2687] usb 5-1: USB disconnect, device number 13 23:05:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:28 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 23:05:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) [ 557.467082][T21690] sctp: [Deprecated]: syz-executor.1 (pid 21690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.467082][T21690] Use struct sctp_sack_info instead 23:05:28 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 23:05:28 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe00) 23:05:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0xf) 23:05:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:29 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) [ 557.889068][ T3583] usb 2-1: new high-speed USB device number 122 using dummy_hcd 23:05:29 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:29 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x6}], 0x1, 0x0, 0x0) exit(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) [ 558.148967][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 558.269031][ T3583] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 558.277475][ T3583] usb 2-1: config 0 has no interface number 0 [ 558.298952][ T3583] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 558.318950][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 558.330644][ T3583] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 558.342081][ T3583] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 558.355816][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.372111][ T3583] usb 2-1: config 0 descriptor?? [ 558.379001][ T8725] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 558.399307][T21694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 558.406828][T21694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 558.642943][ T3583] usb 2-1: USB disconnect, device number 122 [ 558.688369][ T8725] usb 5-1: Using ep0 maxpacket: 8 [ 558.819563][ T8725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.830027][ T8725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.840885][ T8725] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 558.851850][ T8725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.862986][ T8725] usb 5-1: config 0 descriptor?? [ 559.113870][ T3583] usb 5-1: USB disconnect, device number 14 23:05:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0xa26a963a73341) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x604000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x40002002}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, r5+30000000}}, 0x0) dup3(r3, r2, 0x0) r6 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) 23:05:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x1100) 23:05:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:30 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 23:05:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x6}], 0x1, 0x0, 0x0) exit(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) [ 559.203255][T21694] sctp: [Deprecated]: syz-executor.1 (pid 21694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 559.203255][T21694] Use struct sctp_sack_info instead 23:05:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) ftruncate(r1, 0x8) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pselect6(0x26, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 559.640678][ T2506] usb 2-1: new high-speed USB device number 123 using dummy_hcd 23:05:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x48) 23:05:30 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "1501000000200100"}}}}}, 0x0) 23:05:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x100, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x3405) 23:05:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15010000002001ac"}}}}}, 0x0) [ 559.899111][ T2506] usb 2-1: Using ep0 maxpacket: 8 23:05:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x38, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @local}, "15010000002001aa"}}}}}, 0x0) [ 560.039146][ T2506] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 560.047205][ T2506] usb 2-1: config 0 has no interface number 0 [ 560.073810][ T2506] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 560.098500][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 560.121065][ T2506] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 560.143647][ T2506] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 560.164015][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.184815][ T2506] usb 2-1: config 0 descriptor?? [ 560.198832][ T2574] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 560.230103][T21785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 560.237192][T21785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 560.465576][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 560.589479][ T2574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.604208][ T2574] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.633275][ T2574] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 560.653442][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.689301][ T2574] usb 5-1: config 0 descriptor?? [ 560.946568][ T2574] usb 5-1: USB disconnect, device number 15 [ 561.784737][T21843] ------------[ cut here ]------------ [ 561.796925][T21843] URB 000000003b61ad23 submitted while active [ 561.807632][T21843] WARNING: CPU: 1 PID: 21843 at drivers/usb/core/urb.c:363 usb_submit_urb+0x10c1/0x13b0 [ 561.817469][T21843] Kernel panic - not syncing: panic_on_warn set ... [ 561.824166][T21843] CPU: 1 PID: 21843 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 561.832518][T21843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.842565][T21843] Call Trace: [ 561.845865][T21843] dump_stack+0x188/0x20d [ 561.850197][T21843] ? usb_submit_urb+0x1090/0x13b0 [ 561.855308][T21843] panic+0x2e3/0x75c [ 561.859223][T21843] ? add_taint.cold+0x16/0x16 [ 561.863946][T21843] ? __probe_kernel_read+0x188/0x1d0 [ 561.869225][T21843] ? __warn.cold+0x14/0x35 [ 561.873641][T21843] ? usb_submit_urb+0x10c1/0x13b0 [ 561.878667][T21843] __warn.cold+0x2f/0x35 [ 561.883076][T21843] ? usb_submit_urb+0x10c1/0x13b0 [ 561.888108][T21843] report_bug+0x27b/0x2f0 [ 561.892553][T21843] do_error_trap+0x12b/0x220 [ 561.897419][T21843] ? usb_submit_urb+0x10c1/0x13b0 [ 561.902466][T21843] do_invalid_op+0x32/0x40 [ 561.907499][T21843] ? usb_submit_urb+0x10c1/0x13b0 [ 561.912613][T21843] invalid_op+0x23/0x30 [ 561.916939][T21843] RIP: 0010:usb_submit_urb+0x10c1/0x13b0 [ 561.922570][T21843] Code: 89 de e8 12 ae 63 fc 84 db 0f 85 42 f6 ff ff e8 a5 ac 63 fc 4c 89 fe 48 c7 c7 40 1a ac 88 c6 05 82 8b 76 05 01 e8 97 b0 34 fc <0f> 0b e9 20 f6 ff ff c7 44 24 14 01 00 00 00 e9 d7 f6 ff ff 41 bd [ 561.942604][T21843] RSP: 0018:ffffc90016d2f2c0 EFLAGS: 00010286 [ 561.948668][T21843] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 561.956634][T21843] RDX: 0000000000014bc3 RSI: ffffffff815d5ba7 RDI: fffff52002da5e4a [ 561.964602][T21843] RBP: dffffc0000000000 R08: ffff88809ea4c4c0 R09: ffffed1015ce6715 [ 561.972567][T21843] R10: ffff8880ae7338a7 R11: ffffed1015ce6714 R12: 0000000000000cc0 [ 561.981833][T21843] R13: 00000000fffffff0 R14: ffff888097a42400 R15: ffff8880949fa900 [ 561.990176][T21843] ? vprintk_func+0x97/0x1a6 [ 561.994793][T21843] ? down_read+0x110/0x420 [ 561.999305][T21843] snd_usbmidi_submit_urb+0x19/0x60 [ 562.004507][T21843] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 562.010928][T21843] substream_open.isra.0+0x505/0x830 [ 562.016233][T21843] open_substream+0x42e/0x880 [ 562.020913][T21843] rawmidi_open_priv+0x2e8/0x6e0 [ 562.025856][T21843] snd_rawmidi_kernel_open+0x1b5/0x270 [ 562.032360][T21843] midisynth_subscribe+0xf2/0x350 [ 562.037380][T21843] ? midisynth_use+0x250/0x250 [ 562.042142][T21843] ? down_write+0xdb/0x150 [ 562.046557][T21843] ? __down_timeout+0x2d0/0x2d0 [ 562.051401][T21843] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 562.057375][T21843] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 562.063201][T21843] check_and_subscribe_port+0x5b5/0x800 [ 562.068765][T21843] ? midisynth_use+0x250/0x250 [ 562.074053][T21843] snd_seq_port_connect+0x2e4/0x510 [ 562.079253][T21843] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 562.085496][T21843] snd_seq_kernel_client_ctl+0xeb/0x130 [ 562.091137][T21843] snd_seq_oss_midi_open+0x3ee/0x670 [ 562.097898][T21843] ? snd_seq_oss_midi_setup+0x50/0x50 [ 562.103356][T21843] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 562.109168][T21843] ? get_mdev+0x75/0x90 [ 562.113321][T21843] ? get_mididev.isra.0+0x76/0xa0 [ 562.118348][T21843] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 562.124256][T21843] snd_seq_oss_open+0x7fa/0x980 [ 562.129116][T21843] odev_open+0x6c/0x90 [ 562.133182][T21843] ? odev_release+0x70/0x70 [ 562.137702][T21843] soundcore_open+0x446/0x600 [ 562.142399][T21843] ? sound_devnode+0xf0/0xf0 [ 562.146986][T21843] chrdev_open+0x219/0x5c0 [ 562.151400][T21843] ? cdev_put.part.0+0x50/0x50 [ 562.156166][T21843] ? security_file_open+0x84/0x410 [ 562.161278][T21843] do_dentry_open+0x546/0x1340 [ 562.166130][T21843] ? cdev_put.part.0+0x50/0x50 [ 562.170910][T21843] ? security_inode_permission+0xc4/0xf0 [ 562.176553][T21843] ? chown_common+0x550/0x550 [ 562.181229][T21843] ? inode_permission+0xab/0x500 [ 562.186171][T21843] path_openat+0x1e59/0x27d0 [ 562.190772][T21843] ? path_lookupat.isra.0+0x530/0x530 [ 562.196166][T21843] do_filp_open+0x192/0x260 [ 562.200754][T21843] ? may_open_dev+0xf0/0xf0 [ 562.205876][T21843] ? do_raw_spin_lock+0x129/0x2e0 [ 562.210918][T21843] ? _raw_spin_unlock+0x24/0x40 [ 562.215762][T21843] ? __alloc_fd+0x46d/0x600 [ 562.220278][T21843] do_sys_openat2+0x585/0x7d0 [ 562.224954][T21843] ? file_open_root+0x400/0x400 [ 562.230320][T21843] ? _copy_to_user+0x126/0x160 [ 562.235101][T21843] ? put_timespec64+0xcb/0x120 [ 562.239861][T21843] ? ns_to_kernel_old_timeval+0x100/0x100 [ 562.245667][T21843] do_sys_open+0xc3/0x140 [ 562.249991][T21843] ? filp_open+0x70/0x70 [ 562.254241][T21843] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 562.260220][T21843] ? do_syscall_64+0x21/0x7d0 [ 562.264892][T21843] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 562.270959][T21843] do_syscall_64+0xf6/0x7d0 [ 562.275590][T21843] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 562.281713][T21843] RIP: 0033:0x45ca59 [ 562.285589][T21843] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 562.305290][T21843] RSP: 002b:00007fc8f4dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.313701][T21843] RAX: ffffffffffffffda RBX: 00000000004f9280 RCX: 000000000045ca59 [ 562.321687][T21843] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 562.329653][T21843] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 562.337759][T21843] R10: 0000000000000048 R11: 0000000000000246 R12: 00000000ffffffff [ 562.345898][T21843] R13: 00000000000007fc R14: 00000000004cada2 R15: 00007fc8f4dbb6d4 [ 562.355757][T21843] Kernel Offset: disabled [ 562.360225][T21843] Rebooting in 86400 seconds..